qpid-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jakub Scholz <ja...@scholz.cz>
Subject Re: ACL denied queue create request is returned as internal error instead of unauthorized error
Date Wed, 06 Nov 2013 16:23:06 GMT
I created a JIRA QPID-5300 for this one as well. Although I guess this is
not a big issue.

Thanks & Regards
Jakub


On Wed, Nov 6, 2013 at 2:48 PM, Gordon Sim <gsim@redhat.com> wrote:

> On 11/06/2013 01:35 PM, Jakub Scholz wrote:
>
>> Hi,
>>
>> It seems when some ACL errors occur, the C++ broker is sometimes using the
>> AMQP 1.0 error code unauthorized-access and sometimes internal-error. For
>> example the "ACL denied queue access" error is amqp:unauthorized-access:
>>
>> [0x24ca9d0:0] <- @detach [handle=0, closed=true, error=@error
>> [condition=:"amqp:unauthorized-access", description="ACL denied queue
>> access request from
>> ABCFR_ABCFRALMMACC1@QPID0000(/home/jakub/qpid/qpid-trunk/
>> cpp/src/qpid/broker/amqp/Authorise.cpp:72)"]]
>>
>>
>> But "ACL denied queue create access" is amqp:internal-error:
>>
>> [0x1d14b10:0] <- @detach [handle=1, closed=true, error=@error
>> [condition=:"amqp:internal-error", description="unauthorized-access: ACL
>> denied queue create request from
>> ABCFR_ABCFRALMMACC1@QPID0000(/home/jakub/qpid/qpid-trunk/
>> cpp/src/qpid/broker/Broker.cpp:1295)"]]
>>
>>
>> Is there some reason why use for similar problem different errors? I would
>> expect that all ACL errors should be returned as amqp:unauthorized-access,
>> or?
>>
>
> Quite right, it is just missing explicit checks for the more specific type
> of error in some cases it seems.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
> For additional commands, e-mail: users-help@qpid.apache.org
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message