Chuck Rolke created QPID-5561:
---------------------------------
Summary: C++ Broker queue creation ACL checks against wrong limit
values
Key: QPID-5561
URL: https://issues.apache.org/jira/browse/QPID-5561
Project: Qpid
Issue Type: Bug
Components: C++ Broker
Affects Versions: 0.22
Environment: any/all
Reporter: Chuck Rolke
Assignee: Pavel Moravec
If a queue is created without specifying any parameters (like paging queue
without page_factor or pages_loaded set, or durable queue without filecount /
filesize set), the default values from broker configuration are used in the
actual queue creation. However, the ACL rules are in such case tested against
_zero_ values. That brings problems when e.g. ACLs require pages_loaded > 10.
How reproducible:
100%
Steps to Reproduce:
1. Having ACL file like:
{noformat}
acl allow all create queue paging=true pageslowerlimit=1 pagesupperlimit=100
pagefactorlowerlimit=1 pagefactorlowerlimit=100
acl allow all consume
acl allow all access
acl allow all bind
acl deny all all
{noformat}
2. qpid-receive -a "q1; {create:always, node:{type:queue,
x-declare:{arguments:{ 'qpid.paging':true }}}}"
3. qpid-receive -a "q2; {create:always, node:{type:queue,
x-declare:{arguments:{ 'qpid.paging':true, 'qpid.max_pages_loaded':4,
'qpid.page_factor':1 }}}}"
(note, qpid.max_pages_loaded has default value 4 and qpid.page_factor has
default value 1)
Actual results:
q1 is not created with "ACL denied queue create request from anonymous@QPID"
q2 is created (though with the same parameters)
Expected results:
Both q1 and q2 to be created
See [bz1066372|https://bugzilla.redhat.com/show_bug.cgi?id=1066372]
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
