Question about the number of listeners.

[sudovenko]

I have a server running and listening on a particular addess and responding to reply-to address from the message.

Clients are:

     a) connecting to HornetQ request the a unique id from the server using clientRequestor that is a blocked call.

     b) then client creates and listens on the address and temp Queue, based on the unique ID it received, it also passes this ID with following messages as reply address, in order to avoid using clientRequestor.

     c) from that moment I use producer and consumer on the client side to send messages in non-blocking manner.

The questions is, can I prevent malicious client from registering a second consumer on the queue it isn't suppose to listen to.

Best regards,

Steve

[ataylor]

thats a basic security question, have you read the user manual and looked at the security examples?

[sudovenko]

Hi Andy,

Thank you for your reply. I have read the manual, in fact I kept reading security Chapter 31 a few times, however, I haven't found the answer to my question there.

I have not seen the security examples. I use embedded core HornetQ, thus, JBOSS/J2EE related aproach does not apply.

Basically, what I need is to limit maximum number of consumers that can be created for the particular address, or range of addresses.

Best regards,

Steve

[clebert.suconic]

You have to control basic authorization to your queues.. if you don't trust an user.. don't give him authorization to the queues he's not supposed to listen.