Resolution:
Environment
===========
TMA

Description
===========
Out-of-box TMA defines a default entry of Username Service Mappings, which contains empty username, empty service and ACL profile "default". This will allow any client to create transports and publish/susbcribe on any service.

Resolution
===========
Remove this "default" mapping, and add customized mappings such as:
--------
username:      &ltempty>
services:      8600
profile name:  default
--------

Now all clients will be able to publish/subscribe on service 8600 only. You may add more such mappings if you want to allow more services.