You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Keith Wall (JIRA)" <ji...@apache.org> on 2014/03/21 18:19:47 UTC

[jira] [Resolved] (QPID-5634) [Java Broker] Allow ACL rules to express virtual host predicates / remove support for AccessPlugins at vhost level

     [ https://issues.apache.org/jira/browse/QPID-5634?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Keith Wall resolved QPID-5634.
------------------------------

       Resolution: Fixed
    Fix Version/s: 0.29

> [Java Broker] Allow ACL rules to express virtual host predicates / remove support for AccessPlugins at vhost level
> ------------------------------------------------------------------------------------------------------------------
>
>                 Key: QPID-5634
>                 URL: https://issues.apache.org/jira/browse/QPID-5634
>             Project: Qpid
>          Issue Type: Improvement
>          Components: Java Broker
>            Reporter: Keith Wall
>            Assignee: Keith Wall
>             Fix For: 0.29
>
>         Attachments: QPID-5634.tar.bz2
>
>
> Currently, the Java Broker supports a hierarchy of AccessPlugins, with the ability to assign different plugins at the broker and individual virtual host levels.  
> This structure does not fit well with the Broker's overall model.  As a consequence, it is only possible to assign an access plugin at the Broker level through the management APIs.  Assigning a access plugin to a virtual host is not (cleanly) possible.  (The user needs to set a hidden vhost attribute "security.acl" with a value that points to a file).
> It has been decided to remove support for AccessPlugins at the VirtualHost level and change the ACLs expressible at the Broker level to include predicates in terms of the virtual host name. 



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org