Ted Ross created DISPATCH-8:
-------------------------------

             Summary: Message:user-id must be authenticated on ingress
                 Key: DISPATCH-8
                 URL: https://issues.apache.org/jira/browse/DISPATCH-8
             Project: Qpid Dispatch
          Issue Type: Bug
    Affects Versions: 0.1
            Reporter: Ted Ross


When a message is received on an ingress link (i.e. from an originating 
endpoint) and the message has a user-id field in its properties, that user-id 
must be authenticated.

At first, this means that the user-id must be the same as that which was used 
to authenticate the connection.

There may be other means of authenticating user-ids in the future, but Dispatch 
must not simply pass them on unchecked.




--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org

Reply via email to