[ 
https://issues.apache.org/jira/browse/ARTEMIS-3692?focusedWorklogId=775557&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-775557
 ]

ASF GitHub Bot logged work on ARTEMIS-3692:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 27/May/22 18:45
            Start Date: 27/May/22 18:45
    Worklog Time Spent: 10m 
      Work Description: jbertram commented on code in PR #4099:
URL: https://github.com/apache/activemq-artemis/pull/4099#discussion_r883898862


##########
docs/user-manual/en/security.md:
##########
@@ -179,6 +179,28 @@ FQQN) in the `match` of the `security-setting`, e.g.:
 **Note:** Wildcard matching doesn't work in conjuction with FQQN. The explicit
 goal of using FQQN here is to be *exact*.
 
+### Temporary Queues
+
+The `temporary-queue-namespace` value can be used with a `security-setting`
+match just as it can with an 
[`address-setting`](address-model.md#temporary-queues).
+For example:
+
+```xml
+<temporary-queue-namespace>temp</temporary-queue-namespace>
+
+<security-settings>
+   <security-setting match="temp.#">
+      <permission type="createAddress" roles="myRole"/>
+      <permission type="createNonDurableQueue" roles="myRole"/>
+      <permission type="deleteAddress" roles="myRole"/>
+      <permission type="deleteNonDurableQueue" roles="myRole"/>
+   </security-setting>
+</security-settings>
+```
+
+Using this configuration any user in `myRole` can create and delete all the
+resources necessary to deal with temporary JMS queues or topics.

Review Comment:
   OK





Issue Time Tracking
-------------------

    Worklog Id:     (was: 775557)
    Time Spent: 1h  (was: 50m)

> Extend Functionality of Temporary Queue Namespace to Security Settings
> ----------------------------------------------------------------------
>
>                 Key: ARTEMIS-3692
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3692
>             Project: ActiveMQ Artemis
>          Issue Type: Improvement
>            Reporter: Kevin O'Neal
>            Priority: Major
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> Currently the temporary-queue-namespace is only relevant for 
> address-settings, not security-settings. Therefore, the only way to enforce 
> security settings on temporary queues is to use the match "#".



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

Reply via email to