[QPID-4678] [Java Broker] add ACL to restrict new support for broker-level configuration through the management interface

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 0.21
• Fix Version/s: 0.22
• Component/s: Broker-J
• Assignee: Robbie Gemmell
• Reporter: Robbie Gemmell
• Created: 29/Mar/13 11:56
• Updated: 11/Feb/15 20:06
• Resolved: 05/Apr/13 10:36

Description

Recent changes have introduced functionality to configure the broker more extensively through the REST interface. E.g configuring the broker attributes for things like the ACL file, group file, ssl settings, and also adding/removing/editing things like virtualhosts, ports ,authentication providers, etc.

ACL options needs to be added to ensure this functionality can be locked down.