You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Martin Ritchie (JIRA)" <qp...@incubator.apache.org> on 2008/09/30 16:11:44 UTC

[jira] Created: (QPID-1304) ACLPlugin change has removed VHostPassword file plugin.

ACLPlugin change has removed VHostPassword file plugin.
-------------------------------------------------------

                 Key: QPID-1304
                 URL: https://issues.apache.org/jira/browse/QPID-1304
             Project: Qpid
          Issue Type: Bug
          Components: Java Broker
    Affects Versions: M2.1, M3
            Reporter: Martin Ritchie


The change in structure and removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost.

We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (QPID-1304) ACLPlugin change has removed VHostPassword file plugin.

Posted by "Marnie McCormack (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marnie McCormack updated QPID-1304:
-----------------------------------

    Assignee: Martin Ritchie

> ACLPlugin change has removed VHostPassword file plugin.
> -------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3
>            Reporter: Martin Ritchie
>            Assignee: Martin Ritchie
>             Fix For: M5
>
>
> The change in structure and removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (QPID-1304) ACLPlugin change has removed VHostPassword file plugin.

Posted by "Marnie McCormack (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marnie McCormack updated QPID-1304:
-----------------------------------


Moving items not being worked on afaik out of M4 Fix Version

> ACLPlugin change has removed VHostPassword file plugin.
> -------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3
>            Reporter: Martin Ritchie
>
> The change in structure and removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (QPID-1304) SimpleACL is unable to provide virtualhost level access control for a given user

Posted by "Robbie Gemmell (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robbie Gemmell updated QPID-1304:
---------------------------------

    Status: Ready To Review  (was: In Progress)

> SimpleACL is unable to provide virtualhost level access control for a given user
> --------------------------------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3, M4, 0.5
>            Reporter: Martin Ritchie
>            Assignee: Robbie Gemmell
>             Fix For: 0.6
>
>
> The removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost. It should be  possible to define permissions for an entire virtual host on a user basis.There should be a way to provide permissions across all artifacts in a vh for a given user.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Updated: (QPID-1304) SimpleACL is unable to provide virtualhost level access control for a given user

Posted by "Martin Ritchie (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martin Ritchie updated QPID-1304:
---------------------------------

    Description: 
The removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost. It should be  possible to define permissions for an entire virtual host on a user basis.There should be a way to provide permissions across all artifacts in a vh for a given user.

We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.



  was:
The change in structure and removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost.

We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

        Summary: SimpleACL is unable to provide virtualhost level access control for a given user  (was: ACLPlugin change has removed VHostPassword file plugin.)

> SimpleACL is unable to provide virtualhost level access control for a given user
> --------------------------------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3
>            Reporter: Martin Ritchie
>            Assignee: Martin Ritchie
>             Fix For: M5
>
>
> The removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost. It should be  possible to define permissions for an entire virtual host on a user basis.There should be a way to provide permissions across all artifacts in a vh for a given user.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Resolved: (QPID-1304) SimpleACL is unable to provide virtualhost level access control for a given user

Posted by "Marnie McCormack (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marnie McCormack resolved QPID-1304.
------------------------------------

    Resolution: Fixed

Reviewed/tested

> SimpleACL is unable to provide virtualhost level access control for a given user
> --------------------------------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3, M4, 0.5
>            Reporter: Martin Ritchie
>            Assignee: Robbie Gemmell
>             Fix For: 0.6
>
>
> The removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost. It should be  possible to define permissions for an entire virtual host on a user basis.There should be a way to provide permissions across all artifacts in a vh for a given user.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Updated: (QPID-1304) SimpleACL is unable to provide virtualhost level access control for a given user

Posted by "Robbie Gemmell (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robbie Gemmell updated QPID-1304:
---------------------------------

    Affects Version/s: 0.5
                       M4
        Fix Version/s: 0.6

> SimpleACL is unable to provide virtualhost level access control for a given user
> --------------------------------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3, M4, 0.5
>            Reporter: Martin Ritchie
>            Assignee: Robbie Gemmell
>             Fix For: 0.6
>
>
> The removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost. It should be  possible to define permissions for an entire virtual host on a user basis.There should be a way to provide permissions across all artifacts in a vh for a given user.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Updated: (QPID-1304) SimpleACL is unable to provide virtualhost level access control for a given user

Posted by "Martin Ritchie (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martin Ritchie updated QPID-1304:
---------------------------------

    Fix Version/s:     (was: M5)

> SimpleACL is unable to provide virtualhost level access control for a given user
> --------------------------------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3
>            Reporter: Martin Ritchie
>            Assignee: Martin Ritchie
>
> The removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost. It should be  possible to define permissions for an entire virtual host on a user basis.There should be a way to provide permissions across all artifacts in a vh for a given user.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Assigned: (QPID-1304) SimpleACL is unable to provide virtualhost level access control for a given user

Posted by "Robbie Gemmell (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robbie Gemmell reassigned QPID-1304:
------------------------------------

    Assignee: Robbie Gemmell  (was: Martin Ritchie)

> SimpleACL is unable to provide virtualhost level access control for a given user
> --------------------------------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3
>            Reporter: Martin Ritchie
>            Assignee: Robbie Gemmell
>
> The removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost. It should be  possible to define permissions for an entire virtual host on a user basis.There should be a way to provide permissions across all artifacts in a vh for a given user.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


[jira] Updated: (QPID-1304) ACLPlugin change has removed VHostPassword file plugin.

Posted by "Marnie McCormack (JIRA)" <qp...@incubator.apache.org>.
     [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Marnie McCormack updated QPID-1304:
-----------------------------------

    Fix Version/s: M5

> ACLPlugin change has removed VHostPassword file plugin.
> -------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3
>            Reporter: Martin Ritchie
>             Fix For: M5
>
>
> The change in structure and removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (QPID-1304) SimpleACL is unable to provide virtualhost level access control for a given user

Posted by "Robbie Gemmell (JIRA)" <qp...@incubator.apache.org>.
    [ https://issues.apache.org/jira/browse/QPID-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12765997#action_12765997 ] 

Robbie Gemmell commented on QPID-1304:
--------------------------------------

The ACCESS section has now been implemented, such that a list of users may be defined to gain permissions to all artifacts the virtualhost.

The format is as below, nested within the existing security.access_control_list configuration.

<access>
    <users>
        <user>client</user>
    </users>
<access>

> SimpleACL is unable to provide virtualhost level access control for a given user
> --------------------------------------------------------------------------------
>
>                 Key: QPID-1304
>                 URL: https://issues.apache.org/jira/browse/QPID-1304
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: M2.1, M3, M4, 0.5
>            Reporter: Martin Ritchie
>            Assignee: Robbie Gemmell
>             Fix For: 0.6
>
>
> The removal of the VHostPassword file in favour of the new ACL format has lost the ability to limit access per virtualhost. It should be  possible to define permissions for an entire virtual host on a user basis.There should be a way to provide permissions across all artifacts in a vh for a given user.
> We need to implement the <access> section in the XML ACL file to restore the functionality that was present with the VHost PrincipalDatabase.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org