[ 
https://issues.apache.org/jira/browse/AMQ-9238?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17768613#comment-17768613
 ] 

Nicolas Filotto commented on AMQ-9238:
--------------------------------------

The read-only mode exists OOTB in AMQ, the role is called {{user}} and the 
default account is login {{user}} and password {{user}} (see the file 
{{conf/jetty-realm.properties}} for more details). However, please note that if 
you use a version older than {{5.16.4}}, you will need to manually apply the 
fix for AMQ-5388 corresponding to [this 
commit|https://github.com/apache/activemq/commit/ffc2aad]. In other words, you 
will need to set the {{pathSpec}} of the bean {{securityConstraintMapping}} in 
{{conf/jetty.xml}} to {{/,*.jsp,*.html,*.js,*.css,*.png,*.gif,*.ico}}.

> Read only permission configuration   ActiveMQ webui portal 
> -----------------------------------------------------------
>
>                 Key: AMQ-9238
>                 URL: https://issues.apache.org/jira/browse/AMQ-9238
>             Project: ActiveMQ
>          Issue Type: New Feature
>            Reporter: Wei Guo
>            Priority: Major
>
> In practical management, customers want read-only permission for the AMQ web 
> UI portal. 
> I tried the possible permission tuning on jetty.xml  jetty-realm.properties, 
> but that is not working as expected behavior, so we could expect a feature to 
> implement the read-only permission.
> ref: 
>  [AMQ-9198] Self-customized read-only role for AMQ works but caused 
> admin/security login gives 403 - ASF JIRA (apache.org)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to