[SM-1915] Support more fine-grained authorization on JMX access

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.3, 3.3.1
• Fix Version/s: 3.2.4, 3.3.2
• Component/s: servicemix-core
• Assignee: Gert Vanthienen
• Reporter: Gert Vanthienen
• Created: 15/Nov/09 21:54
• Updated: 15/Dec/09 15:52
• Resolved: 16/Nov/09 09:28

Description

Currently, access to the JMX console access is being controlled by a JAAS login module. Once logged in to the JMX console, every user is allowed to do anything with the provided MBeans.

This issue aims to add support for basic authorization control as well as provide a hook for implementing more fine-grained authorization schemes. The basic scheme should allow 'admin' users to do anything and limit the normal users to read-only operations.