[QPID-3892] ACLs shall support full regular expressions in property values

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.14
• Fix Version/s: 0.19
• Component/s: C++ Broker
• Labels: features
• Assignee: Charles E. Rolke
• Reporter: Pavel Moravec
• Created: 09/Mar/12 14:40
• Updated: 24/Aug/12 17:34
• Resolved: 18/Jul/12 17:22

Description

Currently ACL syntax supports in a property value either direct match ("name=RequestQueue") or a substring match ("name=tmp.*").

That is not sufficient when authorizing access to topics. One particular example: amq.topic exchange receives messages with keys usa.sports, usa.news, europe.sports and europe.news. Currently we can not authorize access just to topics *.sports and to usa. *

As there exist different use cases where regular expressions are required in a, it is meaningful to support (full) regular expressions in ACL property values.

Since qpid C++ broker already relies on boost libraries a lot, I suggest (in a patch proposed) using boost::regex library.

I tested the attached patch on Fedora, not sure if other Linux distributions are familiar with the change in Makefile.am.