You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Robbie Gemmell (JIRA)" <qp...@incubator.apache.org> on 2009/10/08 18:22:31 UTC
[jira] Commented: (QPID-1204) SimpleACLTest is not accurate enough
[ https://issues.apache.org/jira/browse/QPID-1204?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12763545#action_12763545 ]
Robbie Gemmell commented on QPID-1204:
--------------------------------------
Investigation of the issue determined that due to the manner in which the ACL is processed ( QPID-2133 ), and the ACL configuration in use, the testServerPublishInvalidQueueSuccess method currently is testing what it was inteded to, as the user in question has been granted create permission to declare the exchange it is attempting to use and so is able to reach the point of publication, which is successfully denied.
> SimpleACLTest is not accurate enough
> ------------------------------------
>
> Key: QPID-1204
> URL: https://issues.apache.org/jira/browse/QPID-1204
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker, Java Client, Java Tests
> Affects Versions: M3
> Reporter: Martin Ritchie
> Assignee: Martin Ritchie
>
> Summary:
> The SimpleACLTest is not comprehensive enough. e.g.
> testServerPublishInvalidQueueSuccess
> Is designed to test that the user 'server' cannot publish to an invalid queue. It doesn't test this!
> Due to the fact that send now validates the destination before publication this test is actually checking to see if the user 'server' can declare an exchange.
> Protocol logging in comments.
> Suggested Change:
> Our Exceptions from the broker should contain more detail about the cause of the error .. 'Access Denied to Exchange' for example so this test can check for 'Acecess Denied to Publish'
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org