Uploaded image for project: 'JBoss A-MQ'
  1. JBoss A-MQ
  2. ENTMQ-1178

ActiveMQ allow not authorized user to browse Queue via Hawtio

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • JBoss A-MQ 6.2
    • JBoss A-MQ 6.2
    • broker
    • None
    • Hide

      1. Overwrite the attached bin and etc folder
      2. start the broker
      bin/activemq console
      3. send some messages to TEST queue
      This works
      java -jar mq-client.jar producer --user admin --password admin --brokerUrl failover://tcp://localhost:8202

      This should failed
      java -jar mq-client.jar producer --user dctl999 --password dctl999 --brokerUrl failover://tcp://localhost:8202

      go to localhost:8161 and log in as dctl999 / dctl999
      Go to TEST queue and hit browse.

      Show
      1. Overwrite the attached bin and etc folder 2. start the broker bin/activemq console 3. send some messages to TEST queue This works java -jar mq-client.jar producer --user admin --password admin --brokerUrl failover://tcp://localhost:8202 This should failed java -jar mq-client.jar producer --user dctl999 --password dctl999 --brokerUrl failover://tcp://localhost:8202 go to localhost:8161 and log in as dctl999 / dctl999 Go to TEST queue and hit browse.

      We use the authorization Plugin to restrict anyone other than admins to views any queues [1]
      But a non admin users can login to hawtio and browse the messages of that queue.

      [1] <authorizationPlugin>
      <map>
      <authorizationMap>
      <authorizationEntries>
      <authorizationEntry queue=">" read="admins" write="admins" admin="admins" />
      <authorizationEntry queue="ADMIN.TEST.QUEUE" read="ctl_users" write="ctl_users" admin="admins" />
      <authorizationEntry queue="DLQ.ADMIN.TEST.QUEUE" read="ctl_users" write="ctl_users" admin="admins" />
      </authorizationEntries>
      </authorizationMap>
      </map>
      </authorizationPlugin>

        1. config.zip
          616 kB

              Unassigned Unassigned
              rhn-support-whui Roger Hui
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: