Pavel Moravec created QPID-5519:
-----------------------------------

             Summary: ACL property/properties for paged queues
                 Key: QPID-5519
                 URL: https://issues.apache.org/jira/browse/QPID-5519
             Project: Qpid
          Issue Type: Improvement
          Components: C++ Broker
    Affects Versions: 0.24
            Reporter: Pavel Moravec
            Assignee: Pavel Moravec
            Priority: Minor


Description of problem:
QPID-4339 adds paged queue but there is no corresponding ACL rule/property 
limiting users in creating paged queues. As from system management point of 
view, a paged queue (being backed up by a physical file) is very similar to a 
durable queue.

Therefore ACL should have property "paging=true" / "paging=false" in create 
queue rule. Additionally, it has some (limited) sense to have limits for 
max_pages_loaded and page_factor attributes. Those limits:
- could limit memory usage (if the property would compare 
max_pages_loaded*page_factor)
- could limit maximal message size to be successfully enqueued (page_factor) - 
though I dont see a big value of such ACL limit; please provide a business 
justification if there is
- could _indirectly_ limit maximal size of the underlying file (that upper 
limit is   page_factor*value_of_(/proc/sys/vm/max_map_count)  ) - as 
max_map_count is usually high, it is less usefull


Version-Release number of selected component (if applicable):
any (incl. qpid 0.26)


How reproducible:
100%


Steps to Reproduce:
any user can run:
qpid-config add queue my-paged-queue --argument qpid.paging=True --argument 
qpid.max_pages_loaded=10000 --argument qpid.page_factor=10000


Actual results:
Any user can create paged queue of arbitrary parameters (paged queue related).


Expected results:
ACL parameters could prevent so.




--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org

Reply via email to