Qpid
  1. Qpid
  2. QPID-2934

Feature to pass the authenticated userId to QMF agent method handlers for authorization

    Details

    • Type: New Feature New Feature
    • Status: Closed
    • Priority: Minor Minor
    • Resolution: Fixed
    • Affects Version/s: 0.9
    • Fix Version/s: 0.9
    • Labels:
      None

      Description

      In order to authorize method calls in QMF, the method handler needs to be provided with the authenticated user-id of the requestor (i.e. the content of the user-id message header as authenticated by the message broker).

      This change provides a new method to Manageable (in the C++ agent API) called AuthorizeMethod. It is virtual and may optionally be overridden by the application. If overridden, it is invoked immediately prior to the call to ManagementMethod (the method handler) with the method-id, method-arguments, and the user-id.

        Activity

          People

          • Assignee:
            Ted Ross
            Reporter:
            Ted Ross
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development