You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Rob Godfrey (JIRA)" <ji...@apache.org> on 2017/03/14 11:55:41 UTC
[jira] [Comment Edited] (QPID-7705) [Java Broker] Inconsistent ACL
behaviour between various versions of Qpid Brokers when 'Unbind' privilege
is required for removal of queue bindings on temporary queue deletion
[ https://issues.apache.org/jira/browse/QPID-7705?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15924057#comment-15924057 ]
Rob Godfrey edited comment on QPID-7705 at 3/14/17 11:55 AM:
-------------------------------------------------------------
As per my [comment|https://issues.apache.org/jira/browse/QPID-7703?focusedCommentId=15924056&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15924056] on QPID-7703, I don't think you should need explicit unbind permission.
was (Author: rgodfrey):
As per my [https://issues.apache.org/jira/browse/QPID-7703?focusedCommentId=15924056&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15924056|comment] on QPID-7703, I don't think you should need explicit unbind permission.
> [Java Broker] Inconsistent ACL behaviour between various versions of Qpid Brokers when 'Unbind' privilege is required for removal of queue bindings on temporary queue deletion
> ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-7705
> URL: https://issues.apache.org/jira/browse/QPID-7705
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Affects Versions: 0.32, qpid-java-6.0, qpid-java-6.1, qpid-java-broker-7.0.0
> Reporter: Alex Rudyy
>
> With 0.32 Java Broker ACL implementation a temporary queue is allowed to be deleted by the owner (for example using JMS {{Session#deleteQueue()}}) without the need for explicit grant of UNBIND privilege to the user. In Qpid Broker versions 6.0 and 6.1 the UNBIND privilege is required for queue deletion because as part of queue deletions all existing bindings are removed and if UNBIND is not granter the binding deletion fails causing queue deletion failure. In the trunk version (7.0) the UNBIND is not required ( See QPID-7703) for temporary queue deletion. We need to fix this ACL inconsistency.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org