[
https://issues.apache.org/jira/browse/QPID-7703?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alex Rudyy updated QPID-7703:
-----------------------------
Affects Version/s: (was: qpid-java-broker-7.0.0)
> [Java Broker] 'Unbind' privilege is not checked for removal of queue
> bindings on queue deletion
> ------------------------------------------------------------------------------------------------
>
> Key: QPID-7703
> URL: https://issues.apache.org/jira/browse/QPID-7703
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Reporter: Alex Rudyy
>
> As part of changes in QPID-6028 the queue binding implementation was changed
> and responsibilities to create and remove bindings were moved into Exchange
> operations 'bind' and 'unbind' accordingly. The exchanges are now
> responsible for performing authorization checks for 'bind' and 'unbind'
> operations. However, on queue deletion, the queue bindings are removed
> without performing 'unbind' authorization checks which is a change in
> behaviour comparing with previous 6.x releases. We need to decide whether we
> need to restore previous behaviour and enforce 'unbind' ACL check on queue
> deletion or keep existing functionality.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
