[jboss-jira] [JBoss JIRA] Closed: (JBMESSAGING-1508) prevent anybody to send destructive management message

[Jeff Mesnil (JIRA)]

     [ https://jira.jboss.org/jira/browse/JBMESSAGING-1508?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jeff Mesnil closed JBMESSAGING-1508.
------------------------------------

    Resolution: Done


fixed in the trunk (see changelog)

> prevent anybody to send destructive management message
> ------------------------------------------------------
>
>                 Key: JBMESSAGING-1508
>                 URL: https://jira.jboss.org/jira/browse/JBMESSAGING-1508
>             Project: JBoss Messaging
>          Issue Type: Bug
>          Components: Configuration and Management
>            Reporter: Jeff Mesnil
>            Assignee: Jeff Mesnil
>             Fix For: 2.0.0 Beta
>
>
> messages sent to the special management address can be potentially destructivte (eg delete all queues).
> Currently, there is no check on this address. We need to add a check when reading/writing to this special address.
> Moreover, the management address is also used in replication and cluster. We need to introduce a special user on the cluster nodes so that the node can exchange management message.
> This special user must have the same password on all the cluster nodes (similar to JBM 1.4 message sucker password)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira