diff --git a/acl/src/main/java/org/apache/rocketmq/acl/plain/PlainPermissionChecker.java b/acl/src/main/java/org/apache/rocketmq/acl/plain/PlainPermissionChecker.java
index 549c9fdce97..8e6c317b237 100644
--- a/acl/src/main/java/org/apache/rocketmq/acl/plain/PlainPermissionChecker.java
+++ b/acl/src/main/java/org/apache/rocketmq/acl/plain/PlainPermissionChecker.java
@@ -27,9 +27,15 @@ public class PlainPermissionChecker implements PermissionChecker {
     public void check(AccessResource checkedAccess, AccessResource ownedAccess) {
         PlainAccessResource checkedPlainAccess = (PlainAccessResource) checkedAccess;
         PlainAccessResource ownedPlainAccess = (PlainAccessResource) ownedAccess;
-        if (Permission.needAdminPerm(checkedPlainAccess.getRequestCode()) && !ownedPlainAccess.isAdmin()) {
+
+        if (ownedPlainAccess.isAdmin()) {
+            // admin user don't need verification
+            return;
+        }
+        if (Permission.needAdminPerm(checkedPlainAccess.getRequestCode())) {
             throw new AclException(String.format("Need admin permission for request code=%d, but accessKey=%s is not", checkedPlainAccess.getRequestCode(), ownedPlainAccess.getAccessKey()));
         }
+
         Map<String, Byte> needCheckedPermMap = checkedPlainAccess.getResourcePermMap();
         Map<String, Byte> ownedPermMap = ownedPlainAccess.getResourcePermMap();
 
@@ -38,11 +44,6 @@ public void check(AccessResource checkedAccess, AccessResource ownedAccess) {
             return;
         }
 
-        if (ownedPermMap == null && ownedPlainAccess.isAdmin()) {
-            // If the ownedPermMap is null and it is an admin user, then return
-            return;
-        }
-
         for (Map.Entry<String, Byte> needCheckedEntry : needCheckedPermMap.entrySet()) {
             String resource = needCheckedEntry.getKey();
             Byte neededPerm = needCheckedEntry.getValue();
@@ -58,7 +59,7 @@ public void check(AccessResource checkedAccess, AccessResource ownedAccess) {
                 continue;
             }
             if (!Permission.checkPermission(neededPerm, ownedPermMap.get(resource))) {
-                throw new AclException(String.format("No default permission for %s", PlainAccessResource.printStr(resource, isGroup)));
+                throw new AclException(String.format("No permission for %s", PlainAccessResource.printStr(resource, isGroup)));
             }
         }
     }
diff --git a/broker/src/main/java/org/apache/rocketmq/broker/metrics/ConsumerLagCalculator.java b/broker/src/main/java/org/apache/rocketmq/broker/metrics/ConsumerLagCalculator.java
index f2abdba74c2..a1afe7e57e3 100644
--- a/broker/src/main/java/org/apache/rocketmq/broker/metrics/ConsumerLagCalculator.java
+++ b/broker/src/main/java/org/apache/rocketmq/broker/metrics/ConsumerLagCalculator.java
@@ -177,12 +177,14 @@ private void processAllGroup(Consumer<ProcessGroupInfo> consumer) {
                 if (isPop) {
                     String retryTopic = KeyBuilder.buildPopRetryTopic(topic, group);
                     TopicConfig retryTopicConfig = topicConfigManager.selectTopicConfig(retryTopic);
-                    int retryTopicPerm = retryTopicConfig.getPerm() & brokerConfig.getBrokerPermission();
-                    if (PermName.isReadable(retryTopicPerm) || PermName.isWriteable(retryTopicPerm)) {
-                        consumer.accept(new ProcessGroupInfo(group, topic, true, retryTopic));
-                    } else {
-                        consumer.accept(new ProcessGroupInfo(group, topic, true, null));
+                    if (retryTopicConfig != null) {
+                        int retryTopicPerm = retryTopicConfig.getPerm() & brokerConfig.getBrokerPermission();
+                        if (PermName.isReadable(retryTopicPerm) || PermName.isWriteable(retryTopicPerm)) {
+                            consumer.accept(new ProcessGroupInfo(group, topic, true, retryTopic));
+                            continue;
+                        }
                     }
+                    consumer.accept(new ProcessGroupInfo(group, topic, true, null));
                 } else {
                     consumer.accept(new ProcessGroupInfo(group, topic, false, null));
                 }
diff --git a/pom.xml b/pom.xml
index c009d0c52d5..f658b210c64 100644
--- a/pom.xml
+++ b/pom.xml
@@ -131,7 +131,7 @@
         <disruptor.version>1.2.10</disruptor.version>
         <org.relection.version>0.9.11</org.relection.version>
         <caffeine.version>2.9.3</caffeine.version>
-        <spring.version>5.3.26</spring.version>
+        <spring.version>5.3.27</spring.version>
         <okio-jvm.version>3.0.0</okio-jvm.version>
         <opentelemetry.version>1.19.0</opentelemetry.version>
         <opentelemetry-exporter-prometheus.version>1.19.0-alpha</opentelemetry-exporter-prometheus.version>
diff --git a/store/src/main/java/org/apache/rocketmq/store/kv/CompactionStore.java b/store/src/main/java/org/apache/rocketmq/store/kv/CompactionStore.java
index 3ba37df9571..b37c907267c 100644
--- a/store/src/main/java/org/apache/rocketmq/store/kv/CompactionStore.java
+++ b/store/src/main/java/org/apache/rocketmq/store/kv/CompactionStore.java
@@ -74,7 +74,7 @@ public CompactionStore(DefaultMessageStore defaultMessageStore) {
         this.compactionLogPath = Paths.get(compactionPath, COMPACTION_LOG_DIR).toString();
         this.compactionCqPath = Paths.get(compactionPath, COMPACTION_CQ_DIR).toString();
         this.positionMgr = new CompactionPositionMgr(compactionPath);
-        this.compactionThreadNum = Math.min(Runtime.getRuntime().availableProcessors(), config.getCompactionThreadNum());
+        this.compactionThreadNum = Math.min(Runtime.getRuntime().availableProcessors(), Math.max(1, config.getCompactionThreadNum()));
 
         this.compactionSchedule = Executors.newScheduledThreadPool(this.compactionThreadNum,
             new ThreadFactoryImpl("compactionSchedule_"));