[ 
https://issues.apache.org/jira/browse/QPID-1204?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12763545#action_12763545
 ] 

Robbie Gemmell commented on QPID-1204:
--------------------------------------

Investigation of the issue determined that due to the manner in which the ACL 
is processed ( QPID-2133 ), and the ACL configuration in use, the 
testServerPublishInvalidQueueSuccess method currently is testing what it was 
inteded to, as the user in question has been granted create permission to 
declare the exchange it is attempting to use and so is able to reach the point 
of publication, which is successfully denied.

> SimpleACLTest is not accurate enough
> ------------------------------------
>
>                 Key: QPID-1204
>                 URL: https://issues.apache.org/jira/browse/QPID-1204
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker, Java Client, Java Tests
>    Affects Versions: M3
>            Reporter: Martin Ritchie
>            Assignee: Martin Ritchie
>
> Summary:
> The SimpleACLTest is not comprehensive enough. e.g.
> testServerPublishInvalidQueueSuccess
> Is designed to test that the user 'server' cannot publish to an invalid 
> queue. It doesn't test this!
> Due to the fact that send now validates the destination before publication 
> this test is actually checking to see if the user 'server' can declare an 
> exchange.
> Protocol logging in comments.
> Suggested Change:
> Our Exceptions from the broker should contain more detail about the cause of 
> the error .. 'Access Denied to Exchange' for example so this test can check 
> for 'Acecess Denied to Publish' 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:[email protected]

Reply via email to