Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-2934

Feature to pass the authenticated userId to QMF agent method handlers for authorization

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 0.9
    • Fix Version/s: 0.9
    • Component/s: QMF
    • Labels:
      None

      Description

      In order to authorize method calls in QMF, the method handler needs to be provided with the authenticated user-id of the requestor (i.e. the content of the user-id message header as authenticated by the message broker).

      This change provides a new method to Manageable (in the C++ agent API) called AuthorizeMethod. It is virtual and may optionally be overridden by the application. If overridden, it is invoked immediately prior to the call to ManagementMethod (the method handler) with the method-id, method-arguments, and the user-id.

        Attachments

          Activity

            People

            • Assignee:
              tedross Ted Ross
              Reporter:
              tedross Ted Ross
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: