qpid-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robbie Gemmell (JIRA)" <qpid-...@incubator.apache.org>
Subject [jira] Commented: (QPID-1204) SimpleACLTest is not accurate enough
Date Thu, 08 Oct 2009 16:22:31 GMT

    [ https://issues.apache.org/jira/browse/QPID-1204?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12763545#action_12763545
] 

Robbie Gemmell commented on QPID-1204:
--------------------------------------

Investigation of the issue determined that due to the manner in which the ACL is processed
( QPID-2133 ), and the ACL configuration in use, the testServerPublishInvalidQueueSuccess
method currently is testing what it was inteded to, as the user in question has been granted
create permission to declare the exchange it is attempting to use and so is able to reach
the point of publication, which is successfully denied.

> SimpleACLTest is not accurate enough
> ------------------------------------
>
>                 Key: QPID-1204
>                 URL: https://issues.apache.org/jira/browse/QPID-1204
>             Project: Qpid
>          Issue Type: Bug
>          Components: Java Broker, Java Client, Java Tests
>    Affects Versions: M3
>            Reporter: Martin Ritchie
>            Assignee: Martin Ritchie
>
> Summary:
> The SimpleACLTest is not comprehensive enough. e.g.
> testServerPublishInvalidQueueSuccess
> Is designed to test that the user 'server' cannot publish to an invalid queue. It doesn't
test this!
> Due to the fact that send now validates the destination before publication this test
is actually checking to see if the user 'server' can declare an exchange.
> Protocol logging in comments.
> Suggested Change:
> Our Exceptions from the broker should contain more detail about the cause of the error
.. 'Access Denied to Exchange' for example so this test can check for 'Acecess Denied to Publish'


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org


Mime
View raw message