You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2019/02/28 10:47:00 UTC

[jira] [Commented] (DISPATCH-1273) 'to' field not authorized against valid targets for anonymous sender

    [ https://issues.apache.org/jira/browse/DISPATCH-1273?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16780367#comment-16780367 ] 

ASF GitHub Bot commented on DISPATCH-1273:
------------------------------------------

grs commented on pull request #452: DISPATCH-1273: enforce target policy for anonymous senders
URL: https://github.com/apache/qpid-dispatch/pull/452
 
 
   
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> 'to' field not authorized against valid targets for anonymous sender
> --------------------------------------------------------------------
>
>                 Key: DISPATCH-1273
>                 URL: https://issues.apache.org/jira/browse/DISPATCH-1273
>             Project: Qpid Dispatch
>          Issue Type: Bug
>    Affects Versions: 1.5.0
>            Reporter: Gordon Sim
>            Priority: Major
>
> With following policy, attempts to attach a sender link to 'bar' will fail as expected, but if an anonymous sender is attached and a message is sent to 'bar', it gets through.
>  
> {noformat}
> [
>     ["vhost",
>      {
>          "id": "$default",
>          "allowUnknownUser": true,
>          "groups": {
>              "$default" : {
>                  "users":            "*",
>                  "remoteHosts":      "*",
>                  "allowDynamicSource":   true,
>                  "allowAnonymousSender": true,
>                  "sources": "*",
>                  "targets": "foo"
>              }
>          }
>      }
>     ]
> ]
> {noformat}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org