You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Keith Wall (JIRA)" <ji...@apache.org> on 2014/07/19 13:28:38 UTC
[jira] [Resolved] (QPID-4309) [Java Broker] ACL permissions for
moving/copying/deleting messages via HTTP mangement interface should not
use the JMX 'method' permissions
[ https://issues.apache.org/jira/browse/QPID-4309?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Keith Wall resolved QPID-4309.
------------------------------
Resolution: Won't Fix
Agreed in a product backlog review - won’t fix.
> [Java Broker] ACL permissions for moving/copying/deleting messages via HTTP mangement interface should not use the JMX 'method' permissions
> -------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-4309
> URL: https://issues.apache.org/jira/browse/QPID-4309
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Reporter: Robbie Gemmell
>
> ACL permissions for moving/copying/deleting messages via HTTP mangement interface should not use the JMX 'method' permissions.
> The JMX interface is permissioned using 'METHOD' permissions with restriction around which 'component' (MBean) type and method name. The HTTP interface is permissioned in terms of the underlying objects, eg queues, exchanges etc and whetehr it can create/delete/update etc them, except for the move/copy/delete messages actions which are permissioned using 'METHOD' rules.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org