[rabbitmq-discuss] Protecting a queue from other users

Julio Polo julio at hawaii.edu
Thu Oct 27 23:59:52 BST 2011


Thanks, that's exactly what I need!  I saw the same permissions table
on a RabbitMQ book, but it wasn't immediately obvious that I could use
regular expressions to specify the resources.

-Julio

On Thu, Oct 27, 2011 at 12:32 PM, Alexandru Scvorţov
<alexandru at rabbitmq.com> wrote:
> You should read:
>  http://www.rabbitmq.com/admin-guide.html#access-control
>
> In short, access to queues (and to a few other things) is controlled by
> three permission strings that each user has.  So, UserB can subscribe to
> QueueA, provided he guesses the queue's name correctly and that he has
> read access to broker-named queues.
>
> You can protect UserA's queues from being read by UserB, but you
> have to name them yourself (and make sure that UserB does not have
> access to queues named that way).  A simple way to do this would be to
> name UserX's queues "userx.<something random>" and to only grant him
> access to "userx\..*" (i.e. all names beginning with the string
> "userx.").
>
> Hope this helps.
>
> Cheers,
> Alex
>
> On Thu, Oct 27, 2011 at 12:17:28PM -1000, Julio Polo wrote:
>> I'm new to RabbitMQ.  Are queues only readable to the user that
>> declared it?  In other words, if UserA declares QueueA, and UserB
>> declares QueueB, both under the same vhost and same exchange, can
>> UserB subscribe to QueueA if he guesses the name of QueueA correctly?
>>
>> Julio Polo
>> University of Hawaii
>> _______________________________________________
>> rabbitmq-discuss mailing list
>> rabbitmq-discuss at lists.rabbitmq.com
>> https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss
>


More information about the rabbitmq-discuss mailing list