[
https://issues.apache.org/jira/browse/QPID-4561?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13570222#comment-13570222
]
Gordon Sim commented on QPID-4561:
----------------------------------
Just as background information, the reason the ACl was originally a separate
module was to allow for alternate implementations (e.g. those that accessed a
set of rules defined through some other standard mechanism/syntax).
I certainly agree that quotas seem like something that should always be active.
I tend to see them as quite distinct from permissions, though I do understand
the practical reasons for combining the two.
> C++ Broker Acl should be built in and not a loadable module
> -----------------------------------------------------------
>
> Key: QPID-4561
> URL: https://issues.apache.org/jira/browse/QPID-4561
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.21
> Environment: Unix/Linux
> Reporter: Chuck Rolke
> Assignee: Chuck Rolke
>
> The Acl module is a strange hybrid of a loadable and a non-loadable module.
> From a linux development environment acl.so is loaded manaully.
> Installed linux qpidd acl.so may be loaded automatically.
> Windows has no acl.dll, it is not loaded but it is built in.
> Windows qpidd has another strange behavior: The quota switches
> (--max-connections, --max-queues-per-user) are built in and always accepted
> by the broker. But they don't take effect unless --acl-file is also specified
> on the command line so that the Acl module wakes up. This is a bug.
> The proposal here is:
> 1. Force Acl code to be a normal built-in part of the broker and dispose of
> the acl.so module.
> 2. Acl processing could still be disabled by not specifying a --acl-file
> command line arg.
> 3. Quotas should always be active.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org
