activemq-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From hobojoe <gorma...@leidos.com>
Subject Minimum security settings to consume
Date Tue, 02 Jul 2019 19:56:58 GMT
I recently tried to setup security following the artemis security example. I
would like to have a read-only Topic like,

<addresses>
       <address name="some.topic.name">
               <multicast/>
       </address>
</addresses>

With consume only permissions like,

<security-settings>
       <security-setting match="some.topic.name">
               <permission roles="user" type="consume"/>
       </security-setting>
</security-setting>

When I try to connect to the broker I get the error:
Setup of JMS message listener invoker failed for destination
'some.topic.name' - trying to recover. Cause: AMQ119213: User: someUser does
not have permission='CREATE_NON_DURABLE_QUEUE' for queue.

If I change security to,
<security-settings>
       <security-setting match="some.topic.name">
               <permission roles="user" type="consume"/>
               *<permission roles="user" type="createNonDurableQueue"/>*
       </security-setting>
</security-setting>

It works? Does this indicate that I setup the Topic incorrectly? Why would I
need to have createNonDurableQueue permissions just to consume?

Any help is appreciated.



--
Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User-f2341805.html

Mime
View raw message