英文:
How to control visibility of the deleteAddress tab per user
问题
在management.xml中，这个过滤器不起作用：
<match domain="org.apache.activemq.artemis" key="address=myadress1">
<access method="delete*" roles="myrole1"/>
场景：
当用户在控制台树中单击myadress时，将显示deleteAddress选项卡，而对于其他地址则不会。
结果：
deleteAddress选项卡不显示。
我已阅读了Artemis和JBoss的文档。
英文:
In management.xml this filter does not work:
<match domain="org.apache.activemq.artemis" key="address=myadress1">
<access method="delete*" roles="myrole1"/>
Scenario:
When the user clicks on myadress in console tree => the tab deleteAddress shows. For other addresses not.
Outcome:
The deleteAddress tab does not show.
I have read Artemis and JBoss documentation.
答案1
得分: 1
"Delete Address"选项卡的显示并不表示用户是否实际上可以删除相关地址。所有选项卡都会显示，而不考虑安全权限，因为Web控制台本身不了解授权细节。安全性是在执行操作（例如删除地址）时在代理上执行的。如果用户未被授权执行该操作，那么当执行该操作时他们将收到错误信息。
英文:
The display of the "Delete Address" tab is not an indication of whether or not the user can actually delete the address in question. All tabs are displayed regardless of security permission because the web console itself has no knowledge about authorization details. Security is enforced on the broker when the operation (e.g. delete address) is executed. If the user is not authorized for that operation then they will receive an error when that operation is executed.
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论