-
Bug
-
Resolution: Done
-
Major
-
AMQ 7.1.0.GA
As administrator I want to create a monitor role to allow access to Management Console only to view and read the status of any objects.
As administrator I am using roles to manage queues and topics successfully but I would like to have users to monitor the broker with the Management Console.
At this moment I created a role and I updated the following files as:
etc/artemis.profile: Changed the roles allowed to access:
-Dhawtio.roles=amq,monitor
etc/management.xml: Allowed methods for each method:
<default-access> <access method="list*" roles="amq,monitor"/> <access method="get*" roles="amq,monitor"/> <access method="is*" roles="amq,monitor"/> <access method="set*" roles="amq"/> <access method="*" roles="amq"/> </default-access> <role-access> <match domain="org.apache.activemq.artemis"> <access method="list*" roles="amq,monitor"/> <access method="get*" roles="amq,monitor"/> <access method="is*" roles="amq,monitor"/> <access method="set*" roles="amq"/> <access method="*" roles="amq"/> </match> </role-access>
With these changes I could login as monitor user however I found a lot of errors as:
ERROR: Insufficient roles/credentials for operation (class java.lang.SecurityException)
- is duplicated by
-
ENTMQBR-1204 make sure access methods are ordered when used
-
- Closed
-
- relates to
-
ENTMQBR-944 [AMQ7, Hawtio, RBAC] User gets no feedback if operation access was denied by RBAC
-
- Closed
-
- is caused by
-
ARTEMIS-1736 Loading...