You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Daniel Kulp (JIRA)" <ji...@apache.org> on 2016/12/07 18:58:00 UTC

[jira] [Issue Comment Deleted] (AMQ-6529) CachedLDAPAuthorizationMap may be queried prior to loading ACL's

     [ https://issues.apache.org/jira/browse/AMQ-6529?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daniel Kulp updated AMQ-6529:
-----------------------------
    Comment: was deleted

(was: 
There are other race conditions in here as well.   During an update operation, a query of ACL's could also get an empty list if they query between the call to entries.clear and the update thread had actually updated that entry.)

> CachedLDAPAuthorizationMap may be queried prior to loading ACL's
> ----------------------------------------------------------------
>
>                 Key: AMQ-6529
>                 URL: https://issues.apache.org/jira/browse/AMQ-6529
>             Project: ActiveMQ
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 5.14.1
>            Reporter: Daniel Kulp
>            Assignee: Daniel Kulp
>
> When not using spring, nothing calls the query method (or afterPropertiesSet method) until the first update call which could occur several seconds or longer after startup.  Thus, early calls to check ACL's could cause denials for requests that shouldn't be denied.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)