# ==========================================
# AtomMQTT ACL Rules
# ==========================================
#
# Format:
#   user <username> topic <publish|subscribe|readwrite> <topic_filter>
#
# Rules are evaluated in order; first match wins. Default = deny.
#
# Topic filters support these wildcards:
#   +  单层通配符 (e.g., sensor/+/temp)
#   #  多层通配符 (e.g., sensor/#)
#
# Examples:
#   user admin topic readwrite #
#   user sensor01 topic publish sensor/#
#   user mobile_app topic subscribe notifications/#

# ===== 管理员: 完全访问 =====
user admin topic readwrite #

# ===== 传感器: 只允许发布 sensor/ 下的主题 =====
user testuser topic publish test/#