gtully commented on PR #4820:
URL: 
https://github.com/apache/activemq-artemis/pull/4820#issuecomment-1964585246

   one challenge is keeping things simple, but also this needs to be 
independent. The VIEW and UPDATE permissions are applicable to both management 
messages on the activemq.management address and on MBean access from JMX and 
the console, where operations on particular MBeans should be locked down.
   
   This means that I cannot  reuse security settings for addresses and queues 
and need to isolate the two entry points.
   
   a postfix on the activemq.management address for management messages, such 
that a match of activemq.management.control.# will give full access.
   
   and a prefix of jmx for mbean access, eg:
    jmx.broker.# // for all broker control operations
    jmx.addresses.activemq.management.pause // for the pause operation on a 
particular address


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: gitbox-unsubscr...@activemq.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to