gtully commented on PR #4820: URL: https://github.com/apache/activemq-artemis/pull/4820#issuecomment-1964585246
one challenge is keeping things simple, but also this needs to be independent. The VIEW and UPDATE permissions are applicable to both management messages on the activemq.management address and on MBean access from JMX and the console, where operations on particular MBeans should be locked down. This means that I cannot reuse security settings for addresses and queues and need to isolate the two entry points. a postfix on the activemq.management address for management messages, such that a match of activemq.management.control.# will give full access. and a prefix of jmx for mbean access, eg: jmx.broker.# // for all broker control operations jmx.addresses.activemq.management.pause // for the pause operation on a particular address -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: gitbox-unsubscr...@activemq.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org