On 05/12/2011 07:11 PM, Carl Trieloff wrote:
In Exchnage.cpp, we have an ACL check for passive... why it it there, as all exchange create calls come through declare which also has the ACL check, any ideas before I delete this code?
On a related point, why does a passive declare require a check for the 'create' permission for an exchange? (Line 86 of qpid/broker/SessionAdapter.cpp)
The purpose of the passive flag is to state that the exchange should *not* created. For authorisation a passive declare is similar to exchange-query.
Likewise for queues (line 296 of the same file). --------------------------------------------------------------------- Apache Qpid - AMQP Messaging Implementation Project: http://qpid.apache.org Use/Interact: mailto:[email protected]
