[ 
https://issues.apache.org/jira/browse/QPID-4309?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Keith Wall resolved QPID-4309.
------------------------------

    Resolution: Won't Fix

Agreed in a product backlog review - won’t fix.

> [Java Broker] ACL permissions for moving/copying/deleting messages via HTTP 
> mangement interface should not use the JMX 'method' permissions
> -------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: QPID-4309
>                 URL: https://issues.apache.org/jira/browse/QPID-4309
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>            Reporter: Robbie Gemmell
>
> ACL permissions for moving/copying/deleting messages via HTTP mangement 
> interface should not use the JMX 'method' permissions.
> The JMX interface is permissioned using 'METHOD' permissions with restriction 
> around which 'component' (MBean) type and method name. The HTTP interface is 
> permissioned in terms of the underlying objects, eg queues, exchanges etc and 
> whetehr it can create/delete/update etc them, except for the move/copy/delete 
> messages actions which are permissioned using 'METHOD' rules.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to