You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Alex Rudyy (JIRA)" <ji...@apache.org> on 2017/03/15 12:01:41 UTC
[jira] [Updated] (QPID-7703) [Java Broker] 'Unbind' privilege is
not checked for removal of queue bindings on queue deletion
[ https://issues.apache.org/jira/browse/QPID-7703?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alex Rudyy updated QPID-7703:
-----------------------------
Affects Version/s: (was: qpid-java-broker-7.0.0)
> [Java Broker] 'Unbind' privilege is not checked for removal of queue bindings on queue deletion
> ------------------------------------------------------------------------------------------------
>
> Key: QPID-7703
> URL: https://issues.apache.org/jira/browse/QPID-7703
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Reporter: Alex Rudyy
>
> As part of changes in QPID-6028 the queue binding implementation was changed and responsibilities to create and remove bindings were moved into Exchange operations 'bind' and 'unbind' accordingly. The exchanges are now responsible for performing authorization checks for 'bind' and 'unbind' operations. However, on queue deletion, the queue bindings are removed without performing 'unbind' authorization checks which is a change in behaviour comparing with previous 6.x releases. We need to decide whether we need to restore previous behaviour and enforce 'unbind' ACL check on queue deletion or keep existing functionality.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org