[ 
https://issues.apache.org/jira/browse/QPID-4520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13538225#comment-13538225
 ] 

Robbie Gemmell commented on QPID-4520:
--------------------------------------

Hi Jakub,

I can certainly see where you are coming from, but I expect there also some 
people would prefer it to be the way it is now. There are also some additional 
aspects to this relating to handling of the exchange bindings and any alternate 
exchange set on the queue. I think there is some change required in there no 
matter what we make the default behaviour be (just looking at it quickly I've 
noticed a bug, possibly two, relating to the alternate exchange stuff), but 
making the behaviour configurable to some extent is perhaps the best option.

I'd like to discuss this further with some of the others before settling on a 
favoured approach, but we are mostly off on vacation now...can you wait until 
after the holidays for some actual progress on this?

Robbie
                
> The deletion of autodelete queue requires ACL rights for deleting the queue
> ---------------------------------------------------------------------------
>
>                 Key: QPID-4520
>                 URL: https://issues.apache.org/jira/browse/QPID-4520
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.21
>         Environment: Java broker (trunk) / Java 1.6 / RHEL 6.3
>            Reporter: JAkub Scholz
>            Priority: Minor
>
> When a user creates an autodelete queue, it should be deleted when the last 
> user disconnects from the queue. This seems to work fine in general. But in 
> some specific situations, the autodelete queue isn't deleted. As an example, 
> following scenario causes problems:
> 1) Enable ACL
> 2) Add user account the right to create the queue as autodelete queue in ACL 
> file. Do not give the user the right to delete the queue.
> 3) Connect with the user and create the queue
> 4) Disconnect the user
> 5) The broker attempts to delete the queue, but fails because the user 
> doesn't have the ACL rights to delete the queue
> 6) The queue remains in the system
> This scenario is a bit artificial, because it can be seen as 
> mis-configuration (i.e. giving the possibility to create the queue and not to 
> delete the queue). But I can imagine a situation when one user creates the 
> queue as autodelete and other users connect to this queue to read from it. 
> The other users might not be supposed to delete the queue under normal 
> circumstances, the queeu should just get deleted after the last user 
> disconnects.
> *In my opinion, the autodeletion should be preferred against the ACL rights.*

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to