[ 
https://issues.apache.org/jira/browse/QPID-2539?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12866184#action_12866184
 ] 

Andrew Kennedy commented on QPID-2539:
--------------------------------------

acl allow admin admin log # allow JMX/QMF log level administration

This means that the log4j logger's level is able to be changed from, e.g. INFO 
to DEBUG, or a new logging configuration file can be loaded, I don't believe it 
is equivalent to:

acl allow admin access all

Also, you use METHOD as both an object and an operation - it isn't clear what 
the difference between, say, access method and update method would be? 

acl allow admin method all # should there be an update or an access before the 
method?
acl allow admin update method reloadACLFile

Would these not be clearer as:

acl allow admin access method name=* # access to all methods
acl allow admin access method name=reloadACLFile # access to a single method

or even:

acl allow admin manage broker method=*
acl allow admin manage broker method=reloadACLFile

I will update the document I'm writing with the results of this discussion and 
post a link.

> Update ACL file syntax to be clearer and add extra operations
> -------------------------------------------------------------
>
>                 Key: QPID-2539
>                 URL: https://issues.apache.org/jira/browse/QPID-2539
>             Project: Qpid
>          Issue Type: Sub-task
>          Components: Java Broker
>            Reporter: Andrew Kennedy
>             Fix For: 0.7
>
>


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscr...@qpid.apache.org

Reply via email to