[jira] [Created] (QPID-5270) Dispatch - Message:user-id must be authenticated on ingress

["Ted Ross (JIRA)" <ji...@apache.org>]

Ted Ross created QPID-5270:
------------------------------

             Summary: Dispatch - Message:user-id must be authenticated on ingress
                 Key: QPID-5270
                 URL: https://issues.apache.org/jira/browse/QPID-5270
             Project: Qpid
          Issue Type: Bug
          Components: Qpid Dispatch
            Reporter: Ted Ross


When a message is received on an ingress link (i.e. from an originating endpoint) and the message has a user-id field in its properties, that user-id must be authenticated.

At first, this means that the user-id must be the same as that which was used to authenticate the connection.

There may be other means of authenticating user-ids in the future, but Dispatch must not simply pass them on unchecked.




--
This message was sent by Atlassian JIRA
(v6.1#6144)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org