-
Bug
-
Resolution: Done
-
Major
-
1.1.0-alpha
-
None
-
Release Notes
-
-
Documented as Resolved Issue
User without "send" permition (nobody in this case) can send a message to the broker.
Steps to reproduce:
1. Configure the broker according to attached configuration.
2. Create a queue (send a message under a user with permition to create a queue, f.e. admin): Interop.Spout.exe --broker amqp://admin:admin@<hostname>:5672 --address jms.queue.myQ
3. Try to send a message under a user without sending permission (nobody):
Interop.Spout.exe --broker amqp://nobody:nobody@<hostname>:5672 --address jms.queue.myQ
Expected results:
The message should not be delivered, SecurityException should be raised.
Current results:
The message is delivered into the queue on the broker.
Note:
This issue occurs also with qpid-cpp client.
The broker behaves as expected with qpid-jms and openwire-jms clients (nobody user cannot send messages, the exception is raised).
Nobody user cannot send messages, but the broker hangs with python-qpid client.
- is cloned by
-
ENTMQCL-444 [legacy-cpp] Support intercepting rejection of sent messages
- Closed