You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Robert Gemmell (JIRA)" <qp...@incubator.apache.org> on 2009/02/27 01:40:01 UTC

[jira] Assigned: (QPID-1697) dont show admin mbeans in the navigation tree if the user doesnt have permission to access them

     [ https://issues.apache.org/jira/browse/QPID-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robert Gemmell reassigned QPID-1697:
------------------------------------

    Assignee: Martin Ritchie  (was: Robert Gemmell)

Hi Martin, can you review this change please.

Previous mbeans that are not queues, connections or exchanges were added directly to the tree. I have added a check that the MBeanInfo can be retrieved before adding it to the navigation tree, preventing the admin-only mbeans from being shown to users who cant view them anyway. 

> dont show admin mbeans in the navigation tree if the user doesnt have permission to access them
> -----------------------------------------------------------------------------------------------
>
>                 Key: QPID-1697
>                 URL: https://issues.apache.org/jira/browse/QPID-1697
>             Project: Qpid
>          Issue Type: Improvement
>          Components: Java Management : JMX Console
>    Affects Versions: M2.1, M3, M4
>            Reporter: Robert Gemmell
>            Assignee: Martin Ritchie
>            Priority: Minor
>             Fix For: Eclipse MC M5
>
>
> Currently the UserManagement and LoggingManagement mbeans are added to the navigation tree of the jmx management console for all users, but only 'admin' level users can access them. 'readonly' and 'readwrite' level users are presented with an access denied dialog when attempting to view them. This can be tested in advance, and the beans simply not displayed in the tree for such users.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org