gtully commented on code in PR #4820: URL: https://github.com/apache/activemq-artemis/pull/4820#discussion_r1522897353
########## docs/user-manual/management.adoc: ########## @@ -585,7 +656,32 @@ This is also configured in broker.xml: </security-setting> ---- -=== Example +==== Fine grained RBAC on management messages +There is optional RBAC on the content of the management messages sent to the management address. + +RBAC is enabled by providing a value for the attribute xref:configuration-index.adoc#management_rbac_suffix[management-rbac-suffix]. +With a `management-rbac-suffix` of `.control.` more fine-grained permissions on the management address can be configured using that suffix appended to the management address. Review Comment: cleared that up. using different prefixes (and prefixes for both) for match address for messages and for jmx helps clarify. they are independent. the jmx. matches handled by the mbean guard, the management messages handled by the session that receives them. the manage permission is still required and is unchanged. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: gitbox-unsubscr...@activemq.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
