What protocol or API are you using for your request-reply work?  Off the
top of my head I wouldn't expect the auto-create attributes would need to
be true in order to create temporary queues.


Justin

On Thu, Mar 22, 2018 at 11:29 AM, Big Puritz <bigpur...@gmail.com> wrote:

> Hello,
>
> as far as i can see, while using the "requst-reply" pattern the broker
> creates a temporary "reply"-queue with the name according to the UUID
> naming pattern, e.g. ca8f4510-5e58-48e7-a4f0-55abf8a43d8e.
>
> To be able to create this queues the user is required to have an
> appropriate  CREATE_NON_DURABLE_QUEUE permission.
>
> That can be achieved with the following configuration (please correct me if
> i'm wrong):
>
> <address-setting match="#">
> ...
> <auto-create-queues>true</auto-create-queues>
>   <auto-create-addresses>true</auto-create-addresses>
> ...
> </address-setting>
>
> <security-setting match="#">
>    ...
>    <permission type="createNonDurableQueue" roles="..."/>
>    <permission type="deleteNonDurableQueue" roles="..."/>
>    ...
> </security-setting>
>
>
> However this configuration makes creation of every non durable queue
> possible, not only the temporary one.
>
> How can I limit the permissions to create temporary queues only? Is there
> any possibility to specify the naming-pattern for the temporary queues.
> E.g. "temp.<uuid>" or something like this.
>
> Thanks in advance.
>

Reply via email to