[jira] [Updated] (AMQ-8391) Consolidate to a single JAAS for messaging and web layers

["Matt Pavlovich (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMQ-8391?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Matt Pavlovich updated AMQ-8391:
--------------------------------
    Fix Version/s: 5.17.0

> Consolidate to a single JAAS for messaging and web layers
> ---------------------------------------------------------
>
>                 Key: AMQ-8391
>                 URL: https://issues.apache.org/jira/browse/AMQ-8391
>             Project: ActiveMQ
>          Issue Type: Task
>            Reporter: Matt Pavlovich
>            Priority: Major
>             Fix For: 5.17.0
>
>
> Currently, the default distribution has 3 user and group backends-- jmx, messaging and web.
> Update:
> 1. Migrate the jetty.xml to use the JAAS backend used for messaging
> 2. Add the jaasAuthentication to default activemq.xml (so it is explicitly visible)
> 3. Update the web-console servlet to permite access via 'web-console-role'
> 4. Update the api servlet to allow access using 'rest-role'
> 5. Add admin to the 'web-console-role' and 'rest-role' by default
> 6. Include the config breaking change in release notes



--
This message was sent by Atlassian Jira
(v8.3.4#803005)