[jira] [Updated] (DISPATCH-1288) Optionally enforce access policy on connections established by the router
[ https://issues.apache.org/jira/browse/DISPATCH-1288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Chuck Rolke updated DISPATCH-1288: -- Attachment: DISPATCH-1288.txt > Optionally enforce access policy on connections established by the router > - > > Key: DISPATCH-1288 > URL: https://issues.apache.org/jira/browse/DISPATCH-1288 > Project: Qpid Dispatch > Issue Type: Bug > Components: Policy Engine >Affects Versions: 1.5.0 >Reporter: Chuck Rolke >Assignee: Chuck Rolke >Priority: Major > Fix For: 1.6.0 > > Attachments: DISPATCH-1288.txt > > > There are cases where router-initiated connections to external processes > (using connectors) need to have enforcement of access policy from the > external container. > That is, when an outbound connection is created by a connector then there is > nothing to prevent that external remote container from opening links to any > address like, for instance, $management. > In the normal case policy is applied only to inbound connections. This issue > covers the case where policy must be applied to outbound connections. > Like the normal policy case, the connector policy will be applied to incoming > link creation requests initiated by the external container. Outbound link > creation requests initiated by the router are exempt from policy restrictions. > -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Updated] (DISPATCH-1288) Optionally enforce access policy on connections established by the router
[ https://issues.apache.org/jira/browse/DISPATCH-1288?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ted Ross updated DISPATCH-1288: --- Fix Version/s: 1.6.0 > Optionally enforce access policy on connections established by the router > - > > Key: DISPATCH-1288 > URL: https://issues.apache.org/jira/browse/DISPATCH-1288 > Project: Qpid Dispatch > Issue Type: Bug > Components: Policy Engine >Affects Versions: 1.5.0 >Reporter: Chuck Rolke >Assignee: Chuck Rolke >Priority: Major > Fix For: 1.6.0 > > > There are cases where router-initiated connections to external processes > (using connectors) need to have enforcement of access policy from the > external container. > That is, when an outbound connection is created by a connector then there is > nothing to prevent that external remote container from opening links to any > address like, for instance, $management. > In the normal case policy is applied only to inbound connections. This issue > covers the case where policy must be applied to outbound connections. > Like the normal policy case, the connector policy will be applied to incoming > link creation requests initiated by the external container. Outbound link > creation requests initiated by the router are exempt from policy restrictions. > -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
