[QPID-1872] NPE thrown by SimpleXML ACLs when consume permission is missing

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: M4, 0.5
• Fix Version/s: 0.6
• Component/s: Broker-J
• Assignee: Robbie Gemmell
• Reporter: Martin Ritchie
• Created: 22/May/09 11:55
• Updated: 11/Feb/15 20:07
• Resolved: 10/Dec/09 16:40

Description

Summary:
When attempting to consume from a queue without permission the broker will throw a NPE if the user does not have any create permissions.

2009-03-19 13:52:56,478 ERROR [pool-2-thread-2] protocol.AMQMinaProtocolSession (AMQMinaProtocolSession.java:365) - Unexpected exception while processing frame. Closing connection.
java.lang.NullPointerException
at org.apache.qpid.server.security.access.PrincipalPermissions.authorise(PrincipalPermissions.java:465)
at org.apache.qpid.server.security.access.plugins.SimpleXML.authorise(SimpleXML.java:309)
at org.apache.qpid.server.handler.BasicConsumeMethodHandler.methodReceived(BasicConsumeMethodHandler.java:101)
at org.apache.qpid.server.handler.ServerMethodDispatcherImpl.dispatchBasicConsume(ServerMethodDispatcherImpl.java:137)
at org.apache.qpid.framing.amqp_0_9.BasicConsumeBodyImpl.execute(BasicConsumeBodyImpl.java:187)
at org.apache.qpid.server.state.AMQStateManager.methodReceived(AMQStateManager.java:204)
at org.apache.qpid.server.protocol.AMQMinaProtocolSession.methodFrameReceived(AMQMinaProtocolSession.java:295)
at org.apache.qpid.framing.AMQMethodBodyImpl.handle(AMQMethodBodyImpl.java:93)
at org.apache.qpid.server.protocol.AMQMinaProtocolSession.frameReceived(AMQMinaProtocolSession.java:

This happens when the user that is used in the connection does not have consume privilege.

Issue Links

• duplicates: QPID-1599 PrincipalPermissions cannot check a CONSUME when none has been granted