[jira] [Commented] (AMQ-9644) Possible to create a queue via browse page

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMQ-9644?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17930621#comment-17930621 ] 

ASF subversion and git services commented on AMQ-9644:
------------------------------------------------------

Commit 79f28c5aa3b5e461ee949b397ceb6ae010e6607d in activemq's branch refs/heads/main from JB Onofré
[ https://gitbox.apache.org/repos/asf?p=activemq.git;h=79f28c5aa3 ]

Merge pull request #1398 from jbonofre/AMQ-9644

AMQ-9644: Don't allow create a queue when browsing (force to create the queue first) in the webconsole

> Possible to create a queue via browse page
> ------------------------------------------
>
>                 Key: AMQ-9644
>                 URL: https://issues.apache.org/jira/browse/AMQ-9644
>             Project: ActiveMQ Classic
>          Issue Type: Bug
>          Components: Web Console
>            Reporter: Jean-Baptiste Onofré
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>             Fix For: 6.2.0, 5.19.0, 6.1.6
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> In the WebConsole, it's possible (if the user has the admin role) to create a destination (queue or topic) via {{{}createDestination.action{}}}.
> However, it's also possible to create a destination via the browse page, without any check on the user permission. For instance, you can access [http://localhost:8161/admin/browse.jsp?JMSDestination=TEST] and {{TEST}} queue will be created if it doesn't exist.
> The {{browse.jsp}} should check if the destination exists and only display the destination (not create it if it doesn't exist).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@activemq.apache.org
For additional commands, e-mail: issues-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact