[jira] [Created] (QPID-4309) [Java Broker] ACL permissions for moving/copying/deleting messages via HTTP mangement interface should not use the JMX 'method' permissions

["Robbie Gemmell (JIRA)" <ji...@apache.org>]

Robbie Gemmell created QPID-4309:
------------------------------------

             Summary: [Java Broker] ACL permissions for moving/copying/deleting messages via HTTP mangement interface should not use the JMX 'method' permissions
                 Key: QPID-4309
                 URL: https://issues.apache.org/jira/browse/QPID-4309
             Project: Qpid
          Issue Type: Bug
          Components: Java Broker
            Reporter: Robbie Gemmell


ACL permissions for moving/copying/deleting messages via HTTP mangement interface should not use the JMX 'method' permissions.

The JMX interface is permissioned using 'METHOD' permissions with restriction around which 'component' (MBean) type and method name. The HTTP interface is permissioned in terms of the underlying objects, eg queues, exchanges etc and whetehr it can create/delete/update etc them, except for the move/copy/delete messages actions which are permissioned using 'METHOD' rules.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org