[rabbitmq-discuss] restrict user to create bindings but not queues

[Michael Klishin]

 On 15 May 2014 at 16:21:34, PATAR, SAGAR (sp345s at att.com) wrote:
> >
> 1) Create an user a separate exchange and give him configure/write/read  
> access on it so he can create queues and bindings dynamically  
> … we wanted to check if we can restrict an user to create only certain  
> no. of queues and bindings ..say 1 queue and 10 bindings … Not sure  
> how to do it..

There is no way to do it.

> 2) Second approach is to create a queue and to create dynamic binding  
> looks like we need to give configure/write/read permissions  
> on the queue and exchange … which will allow him to create queues…Can  
> we give access so he can just create bindings and not queues??  

queue.bind requires write permissions on the queue and read permissions on the
exchange. To declare a queue, one needs configure permissions:
http://www.rabbitmq.com/access-control.html
--  
MK  

Software Engineer, Pivotal/RabbitMQ