Details
-
Bug
-
Resolution: Done
-
Minor
-
JBoss A-MQ 6.1
-
None
Description
in AMQ 6.1 when a user is not authorised for a read operation the broker only logs this as debug by the org.apache.activemq.broker.TransportConnection.Service class.
2014-06-04 14:17:45,635 | DEBUG | Error occured while processing sync command: ConsumerInfo {commandId = 4, responseRequired = true, consumerId = ID:sideshow.home-53898-1401884265406-1:1:1:1, destination = queue://Sabre_q1, prefetchSize = 1000, maximumPendingMessageLimit = 0, browser = false, dispatchAsync = true, selector = null, clientId = ID:sideshow.home-53898-1401884265406-0:1, subscriptionName = null, noLocal = false, exclusive = false, retroactive = false, priority = 0, brokerPath = null, optimizedAcknowledge = false, noRangeAcks = false, additionalPredicate = null}, exception: java.lang.SecurityException: User admin is not authorized to read from: queue://Sabre_q1 | org.apache.activemq.broker.TransportConnection.Service | ActiveMQ Transport: tcp:///192.168.1.105:53899@61616 java.lang.SecurityException: User admin is not authorized to read from: queue://Sabre_q1 at org.apache.activemq.security.AuthorizationBroker.addConsumer(AuthorizationBroker.java:138) at org.apache.activemq.broker.MutableBrokerFilter.addConsumer(MutableBrokerFilter.java:102) at org.apache.activemq.broker.TransportConnection.processAddConsumer(TransportConnection.java:618) at org.apache.activemq.command.ConsumerInfo.visit(ConsumerInfo.java:349) at org.apache.activemq.broker.TransportConnection.service(TransportConnection.java:294) at org.apache.activemq.broker.TransportConnection$1.onCommand(TransportConnection.java:148) at org.apache.activemq.transport.MutexTransport.onCommand(MutexTransport.java:50) at org.apache.activemq.transport.WireFormatNegotiator.onCommand(WireFormatNegotiator.java:113) at org.apache.activemq.transport.AbstractInactivityMonitor.onCommand(AbstractInactivityMonitor.java:270) at org.apache.activemq.transport.TransportSupport.doConsume(TransportSupport.java:83) at org.apache.activemq.transport.tcp.TcpTransport.doRun(TcpTransport.java:214) at org.apache.activemq.transport.tcp.TcpTransport.run(TcpTransport.java:196) at java.lang.Thread.run(Thread.java:695)
It would be good to get some warning message logged on broker to indicate unauthorised read attempted.