Julian Scheid created ARTEMIS-229:
-------------------------------------

             Summary: Additional address argument for validateUserAndRole
                 Key: ARTEMIS-229
                 URL: https://issues.apache.org/jira/browse/ARTEMIS-229
             Project: ActiveMQ Artemis
          Issue Type: Improvement
          Components: Broker
            Reporter: Julian Scheid
            Priority: Minor


Making {{validateUserAndRole}} accept an extra {{address}} parameter and 
passing the destination address in {{SecurityStoreImpl.check}} (along with 
changing the cache keys accordingly) enables authorization schemes that take 
the destination address into account.

To some degree this is already possible using the {{securityRepository}} but 
only for a static list of roles and destinations, it doesn't work so well in an 
environment where e.g. queues are created dynamically and need to be authorized 
based on the user's identity.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to