[jira] [Comment Edited] (ARTEMIS-3974) Enforce security on temporary queues

["Vadzim (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/ARTEMIS-3974?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17602146#comment-17602146 ] 

Vadzim edited comment on ARTEMIS-3974 at 9/9/22 7:09 AM:
---------------------------------------------------------

Thanks for the fast and complete response!

As a natural  flow, we also need to send messages to the tmp queue.
In my understanding by the configuration below we ruin the overall security model (fix me if I'm wrong).
Is there way to limit reading to tmp only queues?
{code:java}
        <security-setting match="#">
                ...
                <permission roles="myRole" type="send" />
        </security-setting>{code}


was (Author: JIRAUSER295526):
Thanks for the fast and complete response,
As a natural  flow, we also need to send messages to the tmp queue.
In my understanding configuration we need ruins the overall security model (fix me if I'm wrong).
{code:java}
        <security-setting match="#">
                ...
                <permission roles="myRole" type="send" />
        </security-setting>{code}

> Enforce security on temporary queues
> ------------------------------------
>
>                 Key: ARTEMIS-3974
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3974
>             Project: ActiveMQ Artemis
>          Issue Type: Bug
>            Reporter: Vadzim
>            Assignee: Justin Bertram
>            Priority: Major
>
> Hi, looks like there is serious issue with administrating temporary queues.
> There is no way to limit clients for creating\reading tmp queues.
> On one hand server has no ability to set limitation per user basis,
> On other hand Artemis JMS client create UUID named generic queue.
> I wonder will it be OK to add configurable tmp queue prefix for the JMS Client?
> Will it work on server side?
> Will you accept a code for  Artemis JMS Client that handles  tmp queue prefix?
> The code to see:
> {code:java}
> org.apache.activemq.artemis.jms.client.ActiveMQSession#createTemporaryQueue()
> org.apache.activemq.artemis.jms.client.ActiveMQDestination#createTemporaryQueue(org.apache.activemq.artemis.jms.client.ActiveMQSession){code}
> {code}
> public static ActiveMQTemporaryQueue createTemporaryQueue(final ActiveMQSession session) {
>    String address = UUID.randomUUID().toString();
> // configurable prefix + address here
>    return createTemporaryQueue(address, session);
> }{code}
> Thanks for the great product.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)