[ARTEMIS-2503] Improve wildcards for the roles access match

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.11.0
• Assignee: Unassigned
• Reporter: Domenico Francesco Bruscino
• Created: 24/Sep/19 19:00
• Updated: 24/Jan/20 12:09
• Resolved: 10/Jan/20 01:51

Description

Please improve wildcard support for the key element in the roles access <match> element.

ATM you can NOT apply a restriction across a set of queue instances starting with the same prefix (like below):

<match domain="org.apache.activemq.artemis" key="queue=my*">
   <access method="list*" roles="group2"/>
   <access method="get*" roles="group2"/>
   ...
</match>

If queues are created dynamically and only a queue name "prefix" is known in advance; JMX RBAC cannot be used to restrict access in this case.

Issue Links

• links to: GitHub Pull Request #2851