[
https://issues.apache.org/jira/browse/QPID-5561?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Chuck Rolke closed QPID-5561.
-----------------------------
Resolution: Duplicate
See https://issues.apache.org/jira/browse/QPID-5565
> C++ Broker queue creation ACL checks against wrong limit values
> ---------------------------------------------------------------
>
> Key: QPID-5561
> URL: https://issues.apache.org/jira/browse/QPID-5561
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.22
> Environment: any/all
> Reporter: Chuck Rolke
> Assignee: Pavel Moravec
>
> If a queue is created without specifying any parameters (like paging queue
> without page_factor or pages_loaded set, or durable queue without filecount /
> filesize set), the default values from broker configuration are used in the
> actual queue creation. However, the ACL rules are in such case tested against
> _zero_ values. That brings problems when e.g. ACLs require pages_loaded > 10.
> How reproducible:
> 100%
> Steps to Reproduce:
> 1. Having ACL file like:
> {noformat}
> acl allow all create queue paging=true pageslowerlimit=1 pagesupperlimit=100
> pagefactorlowerlimit=1 pagefactorlowerlimit=100
> acl allow all consume
> acl allow all access
> acl allow all bind
> acl deny all all
> {noformat}
> 2. qpid-receive -a "q1; {create:always, node:{type:queue,
> x-declare:{arguments:{ 'qpid.paging':true }}}}"
> 3. qpid-receive -a "q2; {create:always, node:{type:queue,
> x-declare:{arguments:{ 'qpid.paging':true, 'qpid.max_pages_loaded':4,
> 'qpid.page_factor':1 }}}}"
> (note, qpid.max_pages_loaded has default value 4 and qpid.page_factor has
> default value 1)
> Actual results:
> q1 is not created with "ACL denied queue create request from anonymous@QPID"
> q2 is created (though with the same parameters)
> Expected results:
> Both q1 and q2 to be created
> See [bz1066372|https://bugzilla.redhat.com/show_bug.cgi?id=1066372]
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
