[ 
https://issues.apache.org/activemq/browse/AMQ-2081?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ben Poor updated AMQ-2081:
--------------------------

    Attachment: AMQ-2081.diff

Quick idea about how to work around this one - feel free to critique it!

Based on an implementation I did that subclassed the existing 
SimpleAuthenticationPlugin/Broker, which I did test to my satisfaction. 
Couldn't test this patched version as activemq wouldn't compile for me :(

The idea is that if the user password and username are null, then it determines 
that you are a client that has not specified a username/password and will 
auto-assign the anonymous user and group to you.

> Allow SimpleAuthenticationBroker to assign privileges to 'anonymous' users.
> ---------------------------------------------------------------------------
>
>                 Key: AMQ-2081
>                 URL: https://issues.apache.org/activemq/browse/AMQ-2081
>             Project: ActiveMQ
>          Issue Type: Improvement
>          Components: Broker
>    Affects Versions: 5.2.0
>            Reporter: Ben Poor
>            Priority: Minor
>         Attachments: AMQ-2081.diff
>
>
> When using the SimpleAuthenticationBroker, there is currently no way to have 
> a combination of 'anonymous' and 'privileged' users. 
> For example, setting up an externally accesible queue or topic, it is often 
> desirable to allow external users access without having to specify a 
> username/password, i.e. read-only. It is similarly desirable to allow 
> internal users access on a read/write basis by specifying a username/password.
> It should be possible to instruct the SimpleAuthenticationBroker that users 
> without a username/password should be put into a specific group for 
> 'anonymous' users, and hence have privileges assigned to them, whilst also 
> allowing privileges to be assigned to users that provide authentication 
> details.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to