Qpid
  1. Qpid
  2. QPID-4249

C++ Broker needs TopicExchange binding key lookup matching in all Acl rules

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 0.18
    • Fix Version/s: 0.19
    • Component/s: C++ Broker
    • Labels:
      None

      Description

      Ref: QPID-3892 and https://reviews.apache.org/r/5836/

      Previous work added TopicExchange routing key matching to Acl lookup:
      PUBLISH EXCHANGE routingkey=X

      This same logic needs to be added to:
      BIND EXCHANGE routingkey=X
      UNBIND EXCHANGE routingkey=X
      ACCESS EXCHANGE routingkey=X

      The problem with current Acl match processing is that an Acl rule like
      allow all BIND EXCHANGE routingkey=news.#

      Will match only when a user literally uses routingkey=news.#
      It will not match routingkey=news.usa nor =news.canada.toronto

      This issue proposes to change the Acl match logic to treat all Acl rule
      routingkey specifications as if they are TopicExchange patterns. User
      requests match the Acl rule using TopicExchange pattern matching logic.

        Activity

        Hide
        Chuck Rolke added a comment -

        Resolved by checkin r1377130

        Show
        Chuck Rolke added a comment - Resolved by checkin r1377130

          People

          • Assignee:
            Unassigned
            Reporter:
            Chuck Rolke
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development