Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 0.8
    • Fix Version/s: 0.9
    • Component/s: C++ Broker
    • Labels:
      None

      Description

      start broker 1 (in example below on 5672) with an acl containing:

      acl allow bob@QPID all all
      acl deny all all

      and broker 2 (on 5673 in my case) with no acl. Then run

      qpid-route -v add link bob/bob@localhost:5672 bill/bill@localhost:5673
      qpid-route -v del link bob/bob@localhost:5672 bill/bill@localhost:5673

      The latter fails as the wrong username is used in the attempted authorisation check (uses bill when it should be bob).

        Activity

        Gordon Sim created issue -
        Hide
        Gordon Sim added a comment -

        The authorisation check that is wrong is also unnecessary. The method can be prevented by restricting the method execution e.g. with:

        acl deny all access method name=close schemaclass=link

        Show
        Gordon Sim added a comment - The authorisation check that is wrong is also unnecessary. The method can be prevented by restricting the method execution e.g. with: acl deny all access method name=close schemaclass=link
        Gordon Sim made changes -
        Field Original Value New Value
        Status Open [ 1 ] Resolved [ 5 ]
        Resolution Fixed [ 1 ]
        Justin Ross made changes -
        Status Resolved [ 5 ] Closed [ 6 ]
        Transition Time In Source Status Execution Times Last Executer Last Execution Date
        Open Open Resolved Resolved
        2m 28s 1 Gordon Sim 17/Jan/11 22:12
        Resolved Resolved Closed Closed
        923d 20h 40m 1 Justin Ross 29/Jul/13 19:53

          People

          • Assignee:
            Gordon Sim
            Reporter:
            Gordon Sim
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development