3 Replies Latest reply on Mar 23, 2009 12:20 PM by Andy Taylor

    security and createQueue

    Andy Taylor Master

      As part of https://jira.jboss.org/jira/browse/JBMESSAGING-1535 I'm making the security finer grained. Locallly so far i have:

      SEND
      CONSUME
      MANAGE
      CREATE_DURABLE_QUEUE
      DELETE_DURABLE_QUEUE
      CREATE_TEMP_QUEUE
      DELETE_TEMP_QUEUE
      


      with regard to the last 4 the problem is it doesn't cover all areas, since the queue being created may be non temporary and non durable.

      Another right 'createQueue' would fix this but the that implies that if someone had createQueue privileges then by default they have createTempQueue and createDurableQueue privileges which may not be the case.

      Or we could allow anyone to create non durable non temp queues.

      wdyt?