[ENTMQBR-432] create more granular control of management authorisation - JBoss Issue Tracker

XML

Word

Printable

Target Release:

AMQ 7.1.0.GA
Sprint:
AMQ Broker 7.1 Sprint 1
Affects:

Release Notes
Release Notes Text:

Hide
Previously, securing access to the JMX management API was limited to granting users either full access or none at all. The 7.1 version of AMQ Broker allows for more granularity when granting user access to JMX objects and methods. The security section of the configuration now includes whitelist, default-access, and role-access sub-elements. See the section "Setting Role Based Access Control" in the product documentation titled "Using AMQ Broker".

Show
Previously, securing access to the JMX management API was limited to granting users either full access or none at all. The 7.1 version of AMQ Broker allows for more granularity when granting user access to JMX objects and methods. The security section of the configuration now includes whitelist, default-access, and role-access sub-elements. See the section "Setting Role Based Access Control" in the product documentation titled "Using AMQ Broker".
Release Notes Docs Status:
Documented as Feature Request

for instance if you have authorization to management you can call anything on the API. we should allow a subset if required.

is related to

ENTMQBR-544 RBAC for the Hawtio console is missing

ENTMQBR-552 RFE - Request for Basic RBAC to allow read-only view of broker console for developers