Hi,

I have a scenario, where I would like to have a read-only user setup on my
queue, which can read the queue or browse the queue, but not able to consume
the messages

The current authorizationEntry tag, has three levels of security control
(read - consume the message, write - produce the message, admin - do
whatever you want). I am looking for readonly control where the user in the
group can view the message via JMS API using selectors and etc, but not
consume the message.

I know QueueBrowser can achieve that, but in order for me to open a
connection to activemq I need to pass user/password and that user has to
have at least read access to the queue I am trying to browse. That meas the
same connection will have access to consume message from the queue, which i
need to avoid.

I also looked at doing this via URL like this
http://localhost:8161/admin/queueBrowse/MY.QUEUE?msgId=123324234. This
works, but the only shortfall is that the <content><data> and
<marshalledProperties><data> are encrypted and I have no clue on how to
decrypt that.

Can you please point me to a solution where I can have a true read only
browser without exposing risk of message consumption.

Thank you



--
View this message in context: 
http://activemq.2283324.n4.nabble.com/Read-only-user-functionality-tp4713881.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Reply via email to