[ 
https://issues.apache.org/jira/browse/QPID-5561?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13905590#comment-13905590
 ] 

Pavel Moravec commented on QPID-5561:
-------------------------------------

I think the two JIRAs point to different problems:

QPID-5561 to wrong limits passed to ACL
QPID-5565 to wrong interpretation of zero value in ACL

Anyway both can be dealt in a single JIRA so closing this is fine for me.

> C++ Broker queue creation ACL checks against wrong limit values
> ---------------------------------------------------------------
>
>                 Key: QPID-5561
>                 URL: https://issues.apache.org/jira/browse/QPID-5561
>             Project: Qpid
>          Issue Type: Bug
>          Components: C++ Broker
>    Affects Versions: 0.22
>         Environment: any/all
>            Reporter: Chuck Rolke
>            Assignee: Pavel Moravec
>
> If a queue is created without specifying any parameters (like paging queue 
> without page_factor or pages_loaded set, or durable queue without filecount / 
> filesize set), the default values from broker configuration are used in the 
> actual queue creation. However, the ACL rules are in such case tested against 
> _zero_ values. That brings problems when e.g. ACLs require pages_loaded > 10.
> How reproducible:
> 100%
> Steps to Reproduce:
> 1. Having ACL file like:
> {noformat}
> acl allow all create queue paging=true pageslowerlimit=1 pagesupperlimit=100 
> pagefactorlowerlimit=1 pagefactorlowerlimit=100
> acl allow all consume
> acl allow all access
> acl allow all bind
> acl deny all all
> {noformat}
> 2. qpid-receive -a "q1; {create:always, node:{type:queue, 
> x-declare:{arguments:{ 'qpid.paging':true }}}}"
> 3. qpid-receive -a "q2; {create:always, node:{type:queue, 
> x-declare:{arguments:{ 'qpid.paging':true, 'qpid.max_pages_loaded':4, 
> 'qpid.page_factor':1 }}}}"
> (note, qpid.max_pages_loaded has default value 4 and qpid.page_factor has 
> default value 1)
> Actual results:
> q1 is not created with "ACL denied queue create request from anonymous@QPID"
> q2 is created (though with the same parameters)
> Expected results:
> Both q1 and q2 to be created
> See [bz1066372|https://bugzilla.redhat.com/show_bug.cgi?id=1066372]



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org

Reply via email to