[ 
https://issues.apache.org/jira/browse/QPID-8488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17496512#comment-17496512
 ] 

ASF subversion and git services commented on QPID-8488:
-------------------------------------------------------

Commit 0b91ded6e2c4587ff4ce2324636e2e5f22645295 in qpid-broker-j's branch 
refs/heads/main from Marek Laca
[ https://gitbox.apache.org/repos/asf?p=qpid-broker-j.git;h=0b91ded ]

QPID-8488: [Broker-J] Enhance ACL rule with multi-value properties

This closes #116

> [Broker-J] Enhance ACL rule with multi-value properties
> -------------------------------------------------------
>
>                 Key: QPID-8488
>                 URL: https://issues.apache.org/jira/browse/QPID-8488
>             Project: Qpid
>          Issue Type: Improvement
>          Components: Broker-J
>            Reporter: Marek Laca
>            Priority: Minor
>              Labels: ACL, Broker, Java
>
> We are using an extensive set of the ACL rules. Our set contains a lot of 
> rules that differ only in single value. For example:
> {code:none}
> ACL ALLOW CON_USER CONSUME QUEUE name="broadcast.ABC.Public"
> ACL ALLOW CON_USER CONSUME QUEUE name="broadcast.ABC.Private"
> ACL ALLOW CON_USER CONSUME QUEUE name="broadcast.ABC.Repeat"
> ACL ALLOW CON_USER CONSUME QUEUE name="response.ABC"
> ACL ALLOW CON_USER CONSUME QUEUE name="error.ABC"
> {code}
> These rules differ only in "name" property, hence if the "name" was a 
> multi-value property then it would allow us to merge the rules into one:
> {code:none}
> ACL ALLOW CON_USER CONSUME QUEUE name=[broadcast.ABC.Public, 
> broadcast.ABC.Private, broadcast.ABC.Repeat, response.ABC, error.ABC]
> {code}
> The multi-value functionality would decrement the amount of our rules 
> substantially and improves the broker throughput.
> *Proposed solution:*
> We could set up multiple possible values as a comma separated list in 
> brackets. The multi-values property can be implemented as the compressed 
> prefix tree that checks an input string in linear time.
>  This task depends on the 
> [QPID-8487|https://issues.apache.org/jira/browse/QPID-8487] because the 
> refactoring of [QPID-8487|https://issues.apache.org/jira/browse/QPID-8487] 
> clears the way for an effective implementation.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to