Even if granting a specific permission to a specific user on a wildcard queue (a.b.c.) in the acl.conf file, why is the EMS server allowing every user to create dynamic queues?
Article ID: KB0093858
Updated On:
| Products | Versions |
|---|---|
| TIBCO Enterprise Message Service | - |
| Not Applicable | - |
Description
Resolution:
Environment:
==========
All
Resolution:
========
The reason that other users can create dynamic queues (matching a.b.c.>) is that the dynamic queue is not defined as a secure destination in queues.conf. When the secure property is enabled for a destination, it instructs the server to check user permissions whenever a user attempts to perform an operation on that destination. If the secure property is not set for a destination, the server does not check permissions for that destination and any authenticated user can perform any operation on that topic or queue.
Issue/Introduction
Even if granting a specific permission to a specific user on a wildcard queue (a.b.c.) in the acl.conf file, why is the EMS server allowing every user to create dynamic queues?
Feedback
Yes
No
Powered by
