[QPID-8163] [Broker-J] [ACL] Owner ACL rules

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: qpid-java-broker-7.1.0, qpid-java-broker-7.0.4
• Component/s: Broker-J
• Assignee: Unassigned
• Reporter: Keith Wall
• Created: 12/Apr/18 13:26
• Updated: 02/Oct/19 19:22
• Resolved: 16/Apr/18 22:12

Description

http://qpid.2158936.n2.nabble.com/Java-Broker-Temporary-queues-ACLs-for-multiple-users-td7674630.html

The Broker-J's access-control-plugin currently has no way to express rules that apply to subject that owns an object.  For instance, it is impossible to say that only a user can consume from any queue that he created.

If the ACL system supported a pseudo subject OWNER (in additional to the pseudo subject ALL it already supports), then it would be possible to write such rules.

ACL ALLOW-LOG OWNER CONSUME QUEUE

It is noted that currently the model does not a have notion of object ownership (QPID-8162).  It does have an immutable createdBy attribute.  The first version of this feature will use createdBy.