[jboss-jira] [JBoss JIRA] Closed: (JBMESSAGING-1508) prevent anybody to send destructive management message

prevent anybody to send destructive management message ------------------------------------------------------ Key: JBMESSAGING-1508 URL: https://jira.jboss.org/jira/browse/JBMESSAGING-1508 Project: JBoss Messaging Issue Type: Bug Components: Configuration and Management Reporter: Jeff Mesnil Assignee: Jeff Mesnil Fix For: 2.0.0 Beta messages sent to the special management address can be potentially destructivte (eg delete all queues). Currently, there is no check on this address. We need to add a check when reading/writing to this special address. Moreover, the management address is also used in replication and cluster. We need to introduce a special user on the cluster nodes so that the node can exchange management message. This special user must have the same password on all the cluster nodes (similar to JBM 1.4 message sucker password)