[
https://issues.apache.org/jira/browse/QPID-3964?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13258127#comment-13258127
]
Gordon Sim commented on QPID-3964:
----------------------------------
There is a 'passive' property that can be specified to give explicit permission
for passive declares. That suggests that the current scheme was at some level
intentional. It requires a 'create' permission with property 'passive' set to
true however, which is odd. A passive declare is much like e.g. a query which
requires the 'access' permission.
> Incorrect ACL checks for passive declares
> -----------------------------------------
>
> Key: QPID-3964
> URL: https://issues.apache.org/jira/browse/QPID-3964
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.16
> Reporter: Gordon Sim
> Assignee: Gordon Sim
> Fix For: 0.17
>
>
> The broker checks for a 'create' permission when responding to a passive
> declare. This is not correct as a passive declare explicitly *does not*
> create the exchange/queue in question.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
