[
https://issues.apache.org/jira/browse/QPID-7857?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16100253#comment-16100253
]
ASF subversion and git services commented on QPID-7857:
-------------------------------------------------------
Commit 7da6ca8f24ac983be0ffc124d64a6f8cf1904fd5 in qpid-broker-j's branch
refs/heads/master from [~lorenz.quack]
[ https://git-wip-us.apache.org/repos/asf?p=qpid-broker-j.git;h=7da6ca8 ]
QPID-7857: [Java Broker] restore old routing behaviour by separating the to
address from the routing address on ServerMessage
> [Java Broker] Invalid routing key
> ---------------------------------
>
> Key: QPID-7857
> URL: https://issues.apache.org/jira/browse/QPID-7857
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Affects Versions: qpid-java-broker-7.0.0
> Environment: Java Broker - latest trunk
> Qpid JMS client - 0.11.1
> Reporter: Tomas Vavricka
> Labels: acl, routing-key
> Fix For: qpid-java-broker-7.0.0
>
> Attachments: 0001-QPID-7857-Return-routing-key.patch
>
>
> There is an issue with routing key when sending message to Java Broker. When
> ACL rule contains {{routingKey}} constraint Java Broker denies access.
> ACL rule:
> {noformat}
> ACL ALLOW-LOG FIXGW ACCESS VIRTUALHOST
> ACL ALLOW-LOG FIXGW PUBLISH EXCHANGE name="request.FIXGW"
> routingKey="TradeReport*"
> {noformat}
> Client code snippet:
> {code:java}
> TextMessage message = session.createTextMessage("...");
> message.setJMSCorrelationID(UUID.randomUUID().toString());
> message.setJMSType("TradeReport");
> {code}
> Java Broker log:
> {noformat}
> ...
> 2017-07-11 15:55:31,003 DEBUG [IO-/172.23.38.39:40030]
> (o.a.q.s.s.a.c.RuleSet) - Checking against rule: Rule[identity='ALL',
> action=AclAction[action=Action[operation=All, object=All, properties={}],
> firewallRule=null], permission=DENY_LOG]
> 2017-07-11 15:55:31,003 DEBUG [IO-/172.23.38.39:40030]
> (o.a.q.s.s.a.c.RuleSet) - Action matches. Result: DENY_LOG
> 2017-07-11 15:55:31,003 INFO [IO-/172.23.38.39:40030] (q.m.a.denied) -
> [con:2(FIXGW@/172.23.38.39:40030/default)/ch:1] ACL-1002 : Denied : Publish
> Exchange {ROUTING_KEY=request.FIXGW, NAME=request.FIXGW,
> VIRTUALHOST_NAME=default}
> 2017-07-11 15:55:31,003 DEBUG [IO-/172.23.38.39:40030]
> (o.a.q.s.m.AbstractConfiguredObject) - authorise returned DENIED
> 2017-07-11 15:55:31,003 DEBUG [IO-/172.23.38.39:40030] (o.a.q.s.p.frame) -
> SEND[/172.23.38.39:40030|1] :
> Detach{handle=0,closed=true,error=Error{condition=not-allowed,description=Permission
> ACTION(publish) is denied for : Exchange 'request.FIXGW' on VirtualHost
> 'default'}}
> 2017-07-11 15:55:31,003 DEBUG [IO-/172.23.38.39:40030]
> (o.a.q.s.s.d.DerbyMessageStore) - REMOVE called on message: 3
> 2017-07-11 15:55:31,003 DEBUG [IO-/172.23.38.39:40030]
> (o.a.q.s.p.v.f.FrameHandler) - RECV 0 bytes
> ...
> {noformat}
> In log there is routing key same as name. But in client was routing key
> specified as TradeReport.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
