Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-10263

AMQ Broker web console shows menu items for unauthorized operations

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • AMQ 7.13.3.GA
    • None

      When utilizing ArtemisRbacMBeanServerBuilder for Role-Based Access Control (RBAC) on management operations, the web console fails to hide menu items for unauthorized actions.

      For instance, a user without the amq role can still see the "Delete Address" menu item, even when the following security configuration is applied to restrict access:

      <security-setting match="mops.broker.deleteAddress">
         <permission type="edit" roles="amq"/>
      </security-setting>
      

      The web console should dynamically filter the user interface. If a user lacks the required permission for a specific management operation (e.g., deleteAddress), the corresponding menu item should be hidden from their view.

              dbruscin Domenico Francesco Bruscino
              dbruscin Domenico Francesco Bruscino
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: