Ted Ross created QPID-5270:
------------------------------

             Summary: Dispatch - Message:user-id must be authenticated on 
ingress
                 Key: QPID-5270
                 URL: https://issues.apache.org/jira/browse/QPID-5270
             Project: Qpid
          Issue Type: Bug
          Components: Qpid Dispatch
            Reporter: Ted Ross


When a message is received on an ingress link (i.e. from an originating 
endpoint) and the message has a user-id field in its properties, that user-id 
must be authenticated.

At first, this means that the user-id must be the same as that which was used 
to authenticate the connection.

There may be other means of authenticating user-ids in the future, but Dispatch 
must not simply pass them on unchecked.




--
This message was sent by Atlassian JIRA
(v6.1#6144)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to