[jboss-dev-forums] [Design of Messaging on JBoss (Messaging/JBoss)] - Re: security and createQueue

[jmesnil]

I'm not in favor of allowing anyone to create non durable non temp queue: I prefer to grant permissions explicitly rather than implicetly.
I'm also not in favor to add permissions for all the combination of (non)durable & non(temp) 

Dumb question: do we really need to distinguish between non durable and durable queue wrt to permissions?
Can't we simply have 4 permissions:
CREATE_QUEUE
DELETE_QUEUE
CREATE_TEMP_QUEUE
DELETE_TEMP_QUEUE

where CREATE_QUEUE & DELETE_QUEUE are checked wether the queue is durable or not?

wdyt?



View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4220275#4220275

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4220275