[QPID-3470] ACL handling and documentation differ

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 0.12
• Component/s: C++ Documentation

Environment

Debian GNU Linux, 32 and 64 bit

• Assignee: Charles E. Rolke
• Reporter: Cajus Pollmeier
• Created: 06/Sep/11 08:22
• Updated: 13/Mar/17 11:49

Description

The documentation states:

user = username[/domain[@realm]]
user-list = user1 user2 user3 ...
group-name-list = group1 group2 group3 ...

group <group-name> = [user-list] [group-name-list]

But the code does not support group nesting. An exception is thrown, detailing that stuff behind the group keyword needs to have a realm.

Example:

group admins admin@QPID me@QPID
group agents amqp@QPID
group clients whatever@QPID
group event-publisher agents admins
group event-consumer clients admins