[
https://issues.apache.org/jira/browse/QPID-7703?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alex Rudyy resolved QPID-7703.
------------------------------
Resolution: Invalid
The unbind permission should not be required for queue deletion if queue
delete permission is granted. The trunk already exhibits this behaviour and the
changes made against QPID-7696 fixed 6.1.x and 6.0.x branches to stop
requiring 'unbind' privilege for queue and exchange deletion
> [Java Broker] 'Unbind' privilege is not checked for removal of queue
> bindings on queue deletion
> ------------------------------------------------------------------------------------------------
>
> Key: QPID-7703
> URL: https://issues.apache.org/jira/browse/QPID-7703
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Reporter: Alex Rudyy
>
> As part of changes in QPID-6028 the queue binding implementation was changed
> and responsibilities to create and remove bindings were moved into Exchange
> operations 'bind' and 'unbind' accordingly. The exchanges are now
> responsible for performing authorization checks for 'bind' and 'unbind'
> operations. However, on queue deletion, the queue bindings are removed
> without performing 'unbind' authorization checks which is a change in
> behaviour comparing with previous 6.x releases. We need to decide whether we
> need to restore previous behaviour and enforce 'unbind' ACL check on queue
> deletion or keep existing functionality.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
