[QPID-2934] Feature to pass the authenticated userId to QMF agent method handlers for authorization

• Type: New Feature
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 0.9
• Fix Version/s: 0.9
• Component/s: QMF
• Assignee: Ted Ross
• Reporter: Ted Ross
• Created: 08/Nov/10 22:17
• Updated: 29/Jul/13 19:06
• Resolved: 09/Nov/10 21:18

Description

In order to authorize method calls in QMF, the method handler needs to be provided with the authenticated user-id of the requestor (i.e. the content of the user-id message header as authenticated by the message broker).

This change provides a new method to Manageable (in the C++ agent API) called AuthorizeMethod. It is virtual and may optionally be overridden by the application. If overridden, it is invoked immediately prior to the call to ManagementMethod (the method handler) with the method-id, method-arguments, and the user-id.