[ 
https://issues.apache.org/jira/browse/QPID-4520?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14068400#comment-14068400
 ] 

Rob Godfrey commented on QPID-4520:
-----------------------------------

I've made a change to allow for what I believe is the correct behaviour (that 
autodelete queues do get deleted).   

I'm not sure what issues @gemmellr had identified to do with bindings and 
alternate exchanges - I couldn't immediately spot anything, and the code in 
this area has probably changed since he last evaluated it.  I think if such 
issues still exist they are probably worth a JIRA in themselves as it's not 
obvious why they would only apply in the "not the same user deleting as created 
the queue" case.

> The deletion of autodelete queue requires ACL rights for deleting the queue
> ---------------------------------------------------------------------------
>
>                 Key: QPID-4520
>                 URL: https://issues.apache.org/jira/browse/QPID-4520
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker
>    Affects Versions: 0.21
>         Environment: Java broker (trunk) / Java 1.6 / RHEL 6.3
>            Reporter: JAkub Scholz
>            Assignee: Rob Godfrey
>            Priority: Minor
>             Fix For: 0.29
>
>
> When a user creates an autodelete queue, it should be deleted when the last 
> user disconnects from the queue. This seems to work fine in general. But in 
> some specific situations, the autodelete queue isn't deleted. As an example, 
> following scenario causes problems:
> 1) Enable ACL
> 2) Add user account the right to create the queue as autodelete queue in ACL 
> file. Do not give the user the right to delete the queue.
> 3) Connect with the user and create the queue
> 4) Disconnect the user
> 5) The broker attempts to delete the queue, but fails because the user 
> doesn't have the ACL rights to delete the queue
> 6) The queue remains in the system
> This scenario is a bit artificial, because it can be seen as 
> mis-configuration (i.e. giving the possibility to create the queue and not to 
> delete the queue). But I can imagine a situation when one user creates the 
> queue as autodelete and other users connect to this queue to read from it. 
> The other users might not be supposed to delete the queue under normal 
> circumstances, the queeu should just get deleted after the last user 
> disconnects.
> *In my opinion, the autodeletion should be preferred against the ACL rights.*



--
This message was sent by Atlassian JIRA
(v6.2#6252)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org

Reply via email to