Temporary queue and

[claude.glauser]

Hi,

in a former post the following has been written:

All temporary queues are created with the role "guest" having
all authority. (http://www.jboss.org/index.html?module=bb&op=viewtopic&t=40190)

Is it possible to create a temporary queue so that a receiver of a secured queue can send an answer to the temporary queue of the jmsreplyto property of a message ?

Thanks a lot for your answers !

....
//connection = qcf.createQueueConnection("claude","claude75"); will raise jmssecurity exception later
connection = qcf.createQueueConnection() //works fine

session = connection.createQueueSession(false, Session.AUTO_ACKNOWLEDGE);
....
TemporaryQueue temp_queue = session.createTemporaryQueue();
QueueReceiver recv = session.createReceiver(temp_queue); //Will raise an auth-exception here if not default user (guest).
recv.setMessageListener(listener);
QueueSender sender = session.createSender(queue);
connection.start();

MapMessage message = session.createMapMessage();
message.setJMSReplyTo(temp_queue);
....
sender.send(message);

[adrian.brock]

That sounds like a good idea. We could give user's roles send authorization,
or maybe it should specifically remember the principal?

Please start a discussion in the JBoss/JMS development forum (towards the bottom
of the forums list) where we consider whether this creates a security hole.
Post a link back into this thread.

If you can provide a patch to do this - so we can test it out, that would be great.