[AMQ-5814] Wrong with role-based authorization when using right permission

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 5.10.0, 5.10.2, 5.11.0, 5.11.1
• Fix Version/s: 5.11.2, 5.12.0
• Component/s: Broker, MQTT

Environment

Unix, Windows

• Regression: Unit Test Broken
• Assignee: Timothy A. Bish
• Reporter: PhuNH5-VTICT
• Created: 29/May/15 04:27
• Updated: 04/Aug/15 12:51
• Resolved: 02/Jul/15 15:41

Description

Since version 5.10, the problem has been caused by broker. It was behaving wrong with role-based authorization. I have configured right SimpleAuthorization plugin but no luck.

I guess it has problem from AMQ-5160

Here my test cases on github, please review and let me know if you have any questions: https://github.com/hongphu8790/activemq/tree/master/mqtt-authorization-test

Project test-case descriptions:

• Using debug mode for broker to view detail
  problem.
• Repeat with pom.xml file
  + With AMQ 5.9.1 (it will pass all test cases)
  + With AMQ >= 5.10.0 (it will pass only test cases with using publisher have super permission

Here my log occurred when the test case failed:

Log debug mode - activemq.log

2015-05-29 10:30:24,746 | DEBUG | AbstractRegion                 | Subscription denied for TopicSubscription: consumer=ID:XXXXXX-50828-1432870224218-2:2:-1:1, destinations=0, dispatched=0, delivered=0, matched=0, discarded=0 to destination topic://dcu.id: User publisher is not authorized to read from: topic://dcu.id

Issue Links

• relates to: AMQ-5160 Wildcard subscriptions bypass Authentication / Authorization