Robbie Gemmell created QPID-4309:
------------------------------------
Summary: [Java Broker] ACL permissions for moving/copying/deleting
messages via HTTP mangement interface should not use the JMX 'method'
permissions
Key: QPID-4309
URL: https://issues.apache.org/jira/browse/QPID-4309
Project: Qpid
Issue Type: Bug
Components: Java Broker
Reporter: Robbie Gemmell
ACL permissions for moving/copying/deleting messages via HTTP mangement
interface should not use the JMX 'method' permissions.
The JMX interface is permissioned using 'METHOD' permissions with restriction
around which 'component' (MBean) type and method name. The HTTP interface is
permissioned in terms of the underlying objects, eg queues, exchanges etc and
whetehr it can create/delete/update etc them, except for the move/copy/delete
messages actions which are permissioned using 'METHOD' rules.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
