[jboss-jira] [JBoss JIRA] Created: (JBMESSAGING-1508) prevent anybody to send destructive management message

Jeff Mesnil (JIRA) jira-events at lists.jboss.org
Thu Feb 12 12:05:44 EST 2009


prevent anybody to send destructive management message
------------------------------------------------------

                 Key: JBMESSAGING-1508
                 URL: https://jira.jboss.org/jira/browse/JBMESSAGING-1508
             Project: JBoss Messaging
          Issue Type: Bug
          Components: Configuration and Management
            Reporter: Jeff Mesnil
            Assignee: Tim Fox
             Fix For: 2.0.0 Beta


messages sent to the special management address can be potentially destructivte (eg delete all queues).

Currently, there is no check on this address. We need to add a check when reading/writing to this special address.
Moreover, the management address is also used in replication and cluster. We need to introduce a special user on the cluster nodes so that the node can exchange management message.
This special user must have the same password on all the cluster nodes (similar to JBM 1.4 message sucker password)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list