[
https://issues.apache.org/jira/browse/AMQ-9644?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17930625#comment-17930625
]
ASF subversion and git services commented on AMQ-9644:
------------------------------------------------------
Commit 68ff6a5f677eb5e02e61a8d4e0122b3b78dd37cd in activemq's branch
refs/heads/activemq-5.19.x from JB Onofré
[ https://gitbox.apache.org/repos/asf?p=activemq.git;h=68ff6a5f67 ]
AMQ-9644: Don't allow create a queue when browsing (force to create the queue
first) in the webconsole
(cherry picked from commit bde4c08adb76dbd59a13c6d3a77f08c75dfe4684)
> Possible to create a queue via browse page
> ------------------------------------------
>
> Key: AMQ-9644
> URL: https://issues.apache.org/jira/browse/AMQ-9644
> Project: ActiveMQ Classic
> Issue Type: Bug
> Components: Web Console
> Reporter: Jean-Baptiste Onofré
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Fix For: 6.2.0, 5.19.0, 6.1.6
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> In the WebConsole, it's possible (if the user has the admin role) to create a
> destination (queue or topic) via {{{}createDestination.action{}}}.
> However, it's also possible to create a destination via the browse page,
> without any check on the user permission. For instance, you can access
> [http://localhost:8161/admin/browse.jsp?JMSDestination=TEST] and {{TEST}}
> queue will be created if it doesn't exist.
> The {{browse.jsp}} should check if the destination exists and only display
> the destination (not create it if it doesn't exist).
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
