[
https://issues.apache.org/jira/browse/QPID-7008?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15123411#comment-15123411
]
Keith Wall commented on QPID-7008:
----------------------------------
A couple of comments:
* we should have a system test for this feature (for 0-9/0-10, for now),
* the docs are now out of date (Java-Broker-Management-Managing-Broker.xml)
* AbstractAMQPConnection#_messageAuthorizationRequired is not thread safe. I
would make it final and assign in the constructor
> [Java Broker] Add message user-id verification to 0-10 and 1-0 protocols
> ------------------------------------------------------------------------
>
> Key: QPID-7008
> URL: https://issues.apache.org/jira/browse/QPID-7008
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Reporter: Rob Godfrey
> Assignee: Rob Godfrey
>
> Currently the Java Broker with verify that the user-id associated with a
> message is (if present) equal to the user-id by which the connection
> authenticated if the qpid.broker_msg_auth setting is true - but only for AMQP
> 0-8/9/9-1 protocols.
> This should be extended to cover all AMQP protocols.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
