OK, so I am answering my own question here (instead of just deleting it all) in case it might be of help to someone...
I have solved it by doing the following: * decorate the class SecurityContext * in the decorator, override method getAuthorizedWriteDests * in that method, always return an empty map * ensure that map remains empty (in spite of AuthorizationBroker.send invoking map.put) by overriding that instance of the map's put method (to make it do nothing) * extend AuthorizationBroker * in the subclass, override method checkSecurityContext * in that method, instead of returning the SecurityContext, return an instance of the decorator Feels a bit hacky o_O -- View this message in context: http://activemq.2283324.n4.nabble.com/Unwanted-caching-of-authorization-results-tp4724676p4724707.html Sent from the ActiveMQ - User mailing list archive at Nabble.com.
