Details
-
Improvement
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
0.24
Description
Description of problem:
QPID-4339 adds paged queue but there is no corresponding ACL rule/property limiting users in creating paged queues. As from system management point of view, a paged queue (being backed up by a physical file) is very similar to a durable queue.
Therefore ACL should have property "paging=true" / "paging=false" in create queue rule. Additionally, it has some (limited) sense to have limits for max_pages_loaded and page_factor attributes. Those limits:
- could limit memory usage (if the property would compare max_pages_loaded*page_factor)
- could limit maximal message size to be successfully enqueued (page_factor) - though I dont see a big value of such ACL limit; please provide a business justification if there is
- could indirectly limit maximal size of the underlying file (that upper limit is page_factor*value_of_(/proc/sys/vm/max_map_count) ) - as max_map_count is usually high, it is less usefull
Version-Release number of selected component (if applicable):
any (incl. qpid 0.26)
How reproducible:
100%
Steps to Reproduce:
any user can run:
qpid-config add queue my-paged-queue --argument qpid.paging=True --argument qpid.max_pages_loaded=10000 --argument qpid.page_factor=10000
Actual results:
Any user can create paged queue of arbitrary parameters (paged queue related).
Expected results:
ACL parameters could prevent so.