activemq-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Martyn Taylor (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (ARTEMIS-592) Allow fine grain access control (durable subscriptions)
Date Fri, 22 Jul 2016 10:39:20 GMT

    [ https://issues.apache.org/jira/browse/ARTEMIS-592?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15389292#comment-15389292
] 

Martyn Taylor edited comment on ARTEMIS-592 at 7/22/16 10:38 AM:
-----------------------------------------------------------------

Thanks for the explanation Lionel.  I think I understand the problem, but just to ensure we're
on the same page, let me iterate back what I think the problem is.

There are two STOMP clients, A and B, which both subscribe to add jms.topic.foo.  Which looks
something like:

```java
                                                              / -------------->  [Ma,Ma,Ma]
(Sub Q Client A)
JMS Producer ----------> jms.topic.foo /
                                                            \
                                                              \ -------------> [Mb,Mb,Mb]
(sub Q Client B)
```

The thing you are trying to prevent, is client A setting up a subscription to jms.topic.foo
and potentially consuming client B messages?

I've looked into the STOMP code and I believe there is a bug that causes this problem.  Subscriptions
queues are not properly created, meaning two subscriptions to the same address could receive
each others messages.  Is this what you are seeing?  If so would fixing the bug resolve this
issue?


was (Author: martyntaylor):
Thanks for the explanation Lionel.  I think I understand the problem, but just to ensure we're
on the same page, let me iterate back what I think the problem is.

There are two STOMP clients, A and B, which both subscribe to add jms.topic.foo.  Which looks
something like:

```
                                                              / -------------->  [Ma,Ma,Ma]
(Sub Q Client A)
JMS Producer ----------> jms.topic.foo /
                                                            \
                                                              \ -------------> [Mb,Mb,Mb]
(sub Q Client B)
```

The thing you are trying to prevent, is client A setting up a subscription to jms.topic.foo
and potentially consuming client B messages?

I've looked into the STOMP code and I believe there is a bug that causes this problem.  Subscriptions
queues are not properly created, meaning two subscriptions to the same address could receive
each others messages.  Is this what you are seeing?  If so would fixing the bug resolve this
issue?

> Allow fine grain access control (durable subscriptions)
> -------------------------------------------------------
>
>                 Key: ARTEMIS-592
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-592
>             Project: ActiveMQ Artemis
>          Issue Type: Improvement
>            Reporter: Lionel Cons
>
> According to the documentation:
> {quote}
> Apache ActiveMQ Artemis allows sets of permissions to be defined against the queues based
on their address.
> {quote}
> Two different subscriptions on the same topic will have the same address (the topic),
only their name will change. So it seems they will get the same permissions.
> Could you please allow fine grain access control to be able to set different permissions
to different durable subscriptions of the same topic?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message