[rabbitmq-discuss] Issue: user is able to publish to queue that he does not have write permission to

Bill Gerrard billg at nffs.com
Tue Sep 6 15:14:45 BST 2011


Matthias,

On 09/02/2011 11:00 PM, Matthias Radestock wrote:
> Bill,
>
> On 02/09/11 16:14, Bill Gerrard wrote:
>> Testing permissions and discovered user is able to publish to queue that
>> he does not have write permission to.
>
> Technically there is no such thing as publishing to a queue; one 
> always publishes to an exchange. Though the default exchange helps 
> create the illusion that one can publish to a queue.
>
> As per http://www.rabbitmq.com/admin-guide.html#access-control, 
> publishing only requires write permissions on the exchange.

Thank you for the clarification. I will look into using per-queue fanout 
exchanges.


More information about the rabbitmq-discuss mailing list