[rabbitmq-discuss] Access Control required for RabbitMQ and Management plugin

[Saurabh Sharma]

Hi Simon,

Thanks for your reply .
I have gone through the links provided but still not able to achieve my
goal.
1) i want to create a user who can make call to api for aliveness test and
querying queues.
i am setting permission like

rabbitmqctl set_permissions -p / monitor "^(.\.aliveness-test.*)$"
"^(.\.aliveness-test.*)$" ".*"

but still getting the error that
"error":"not_authorised","reason":"ACCESS_REFUSED - access to queue
'aliveness-test' in vhost '/' refused for user 'monitor'"


can you please direct me about how to create a user with specific
permissions on a specific resource .



Thanks
Saurabh Sharma






On Thu, Dec 19, 2013 at 6:32 PM, Simon MacMullen <simon at rabbitmq.com> wrote:

> Have you read http://www.rabbitmq.com/access-control.html and
> http://www.rabbitmq.com/management.html#permissions?
>
> Cheers, Simon
>
>
> On 19/12/13 12:53, Saurabh Sharma wrote:
>
>> Hi,
>> I am working on an application where i want different users for
>> different tasks.
>> 1)I want a user who can publish/consume messages and ack/nack them but
>> not able to create queue on server . I am able to create this user by
>> giving read and write rights and No configure rights.
>> How can i only define rules that i only need user to have
>> queue.publish
>> queue.consume
>> queue.get
>>
>> (basically how to create a user only with specific commands)
>> permissions and not the other permission .
>>
>> 2) I want to hit the Management plugin api for some purpose and it uses
>> authentication.
>> What kind of user should i create to use the api
>> a) read only [not able to hit the api]
>> b) read and write [not able to hit the api]
>> c) read , write , configure [able to hit the api]
>>
>> if i create the aliveness-test queue on the server by a superuser , will
>> i be able to hit the api in all other cases [if the queue exist] using a
>> read only user.
>>
>>
>>
>> Thanks and Regards
>> Saurabh Sharma
>>
>>
>>
>> _______________________________________________
>> rabbitmq-discuss mailing list
>> rabbitmq-discuss at lists.rabbitmq.com
>> https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss
>>
>>
>
> --
> Simon MacMullen
> RabbitMQ, Pivotal
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/attachments/20131220/9970e0bf/attachment.html>