Qpid
  1. Qpid
  2. QPID-2870

an unauthorised attempt to delete a queue will prevent all further deletion attempts

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 0.7
    • Fix Version/s: 0.7
    • Component/s: Java Broker
    • Labels:
      None

      Description

      The location of the ACL check for queue deletion rights is within the wrapping AtomicBoolean used to prevent races at queue deletion. As such if the attempt is denied by the security manager the deletion will fail, but no further deletion attempts will be possible.

        Activity

        Hide
        Robbie Gemmell added a comment -

        Update applied to move the authorisation check outside the protected code block.

        Show
        Robbie Gemmell added a comment - Update applied to move the authorisation check outside the protected code block.
        Hide
        Marnie McCormack added a comment -

        Change reviewed ok, perils of AtomicX

        Show
        Marnie McCormack added a comment - Change reviewed ok, perils of AtomicX

          People

          • Assignee:
            Robbie Gemmell
            Reporter:
            Robbie Gemmell
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development