activemq-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Justin Bertram <jbert...@apache.org>
Subject Re: [artemis] Naming-Pattern for temporary "reply"-queues and exclusive permissions
Date Mon, 26 Mar 2018 18:51:23 GMT
What protocol or API are you using for your request-reply work?  Off the
top of my head I wouldn't expect the auto-create attributes would need to
be true in order to create temporary queues.


Justin

On Thu, Mar 22, 2018 at 11:29 AM, Big Puritz <bigpuritz@gmail.com> wrote:

> Hello,
>
> as far as i can see, while using the "requst-reply" pattern the broker
> creates a temporary "reply"-queue with the name according to the UUID
> naming pattern, e.g. ca8f4510-5e58-48e7-a4f0-55abf8a43d8e.
>
> To be able to create this queues the user is required to have an
> appropriate  CREATE_NON_DURABLE_QUEUE permission.
>
> That can be achieved with the following configuration (please correct me if
> i'm wrong):
>
> <address-setting match="#">
> ...
> <auto-create-queues>true</auto-create-queues>
>   <auto-create-addresses>true</auto-create-addresses>
> ...
> </address-setting>
>
> <security-setting match="#">
>    ...
>    <permission type="createNonDurableQueue" roles="..."/>
>    <permission type="deleteNonDurableQueue" roles="..."/>
>    ...
> </security-setting>
>
>
> However this configuration makes creation of every non durable queue
> possible, not only the temporary one.
>
> How can I limit the permissions to create temporary queues only? Is there
> any possibility to specify the naming-pattern for the temporary queues.
> E.g. "temp.<uuid>" or something like this.
>
> Thanks in advance.
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message