gtully commented on PR #4820:
URL:
https://github.com/apache/activemq-artemis/pull/4820#issuecomment-1964585246
one challenge is keeping things simple, but also this needs to be
independent. The VIEW and UPDATE permissions are applicable to both management
messages on the activemq.management address and on MBean access from JMX and
the console, where operations on particular MBeans should be locked down.
This means that I cannot reuse security settings for addresses and queues
and need to isolate the two entry points.
a postfix on the activemq.management address for management messages, such
that a match of activemq.management.control.# will give full access.
and a prefix of jmx for mbean access, eg:
jmx.broker.# // for all broker control operations
jmx.addresses.activemq.management.pause // for the pause operation on a
particular address
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
