You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@artemis.apache.org by "anmol-saxena-14 (via GitHub)" <gi...@apache.org> on 2026/04/09 17:39:16 UTC
[PR] ARTEMIS-5949 Clarify manage permission in default broker.xml [artemis]
anmol-saxena-14 opened a new pull request, #6355:
URL: https://github.com/apache/artemis/pull/6355
Move the `manage` permission out of the wildcard `match="#"` security-setting and into a dedicated `match="activemq.management.#"` entry, along with the supporting permissions required for management operations (createNonDurableQueue, deleteNonDurableQueue, createAddress, deleteAddress, consume, send).
The old placement was imprecise: granting manage across all addresses is broader than necessary, since it is only meaningful on the management address.
The stale comment explaining the wildcard manage entry is also removed.
Changes:
- artemis-cli broker.xml template (used by `artemis create`)
- artemis-features artemis.xml
- jmx-rbac-broker-security smoke-test fixture (aligned to new default)
- ArtemisTest:add testDefaultSecuritySettings to assert the generated broker.xml has manage only on activemq.management.# and not on #
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@artemis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@artemis.apache.org
For additional commands, e-mail: issues-help@artemis.apache.org
Re: [PR] ARTEMIS-5949 Clarify manage permission in default broker.xml [artemis]
Posted by "jbertram (via GitHub)" <gi...@apache.org>.
jbertram commented on PR #6355:
URL: https://github.com/apache/artemis/pull/6355#issuecomment-4244704764
@anmol-saxena-14, thanks for the contribution. Hope to see more from you!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@artemis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@artemis.apache.org
For additional commands, e-mail: issues-help@artemis.apache.org
Re: [PR] ARTEMIS-5949 Clarify manage permission in default broker.xml [artemis]
Posted by "jbertram (via GitHub)" <gi...@apache.org>.
jbertram merged PR #6355:
URL: https://github.com/apache/artemis/pull/6355
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@artemis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@artemis.apache.org
For additional commands, e-mail: issues-help@artemis.apache.org