[jboss-jira] [JBoss JIRA] Created: (JBMESSAGING-1508) prevent anybody to send destructive management message
Jeff Mesnil (JIRA)
jira-events at lists.jboss.org
Thu Feb 12 12:05:44 EST 2009
prevent anybody to send destructive management message
------------------------------------------------------
Key: JBMESSAGING-1508
URL: https://jira.jboss.org/jira/browse/JBMESSAGING-1508
Project: JBoss Messaging
Issue Type: Bug
Components: Configuration and Management
Reporter: Jeff Mesnil
Assignee: Tim Fox
Fix For: 2.0.0 Beta
messages sent to the special management address can be potentially destructivte (eg delete all queues).
Currently, there is no check on this address. We need to add a check when reading/writing to this special address.
Moreover, the management address is also used in replication and cluster. We need to introduce a special user on the cluster nodes so that the node can exchange management message.
This special user must have the same password on all the cluster nodes (similar to JBM 1.4 message sucker password)
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list