1 Reply Latest reply on Apr 26, 2004 4:18 PM by Adrian Brock

    Temporary queue and

    Claude Glauser Newbie

      Hi,

      in a former post the following has been written:

      All temporary queues are created with the role "guest" having
      all authority. (http://www.jboss.org/index.html?module=bb&op=viewtopic&t=40190)

      Is it possible to create a temporary queue so that a receiver of a secured queue can send an answer to the temporary queue of the jmsreplyto property of a message ?

      Thanks a lot for your answers !

      ....
      //connection = qcf.createQueueConnection("claude","claude75"); will raise jmssecurity exception later
      connection = qcf.createQueueConnection() //works fine

      session = connection.createQueueSession(false, Session.AUTO_ACKNOWLEDGE);
      ....
      TemporaryQueue temp_queue = session.createTemporaryQueue();
      QueueReceiver recv = session.createReceiver(temp_queue); //Will raise an auth-exception here if not default user (guest).
      recv.setMessageListener(listener);
      QueueSender sender = session.createSender(queue);
      connection.start();

      MapMessage message = session.createMapMessage();
      message.setJMSReplyTo(temp_queue);
      ....
      sender.send(message);

        • 1. Re: Temporary queue and
          Adrian Brock Master

          That sounds like a good idea. We could give user's roles send authorization,
          or maybe it should specifically remember the principal?

          Please start a discussion in the JBoss/JMS development forum (towards the bottom
          of the forums list) where we consider whether this creates a security hole.
          Post a link back into this thread.

          If you can provide a patch to do this - so we can test it out, that would be great.