ActiveMQ Artemis ActiveMQSecurityManager4验证ClientId/订阅

Question

目前Artemis拥有ActiveMQSecurityManager4。当使用以下方法时，它提供了大量的控制：

/**
* Determine whether the given user is valid and whether they have
* the correct role for the given destination address.
*
* This method is called instead of
* {@link ActiveMQSecurityManager#validateUserAndRole(String, String, Set, CheckType)}.
*
* @param user       the user
* @param password   the user's password
* @param roles      the user's roles
* @param checkType  which permission to validate
* @param address    the address for which to perform authorization
* @param remotingConnection the user's connection
* @param securityDomain the name of the JAAS security domain to use (can be null)
* @return the name of the validated user or null if the user isn't validated
*/
String validateUserAndRole(String user,
                          String password,
                          Set<Role> roles,
                          CheckType checkType,
                          String address,
                          RemotingConnection remotingConnection,
                          String securityDomain);

/**
* The ActiveMQ Artemis SecurityStore implementation
*/
public class SecurityStoreImpl implements SecurityStore, HierarchicalRepositoryChangeListener {

...

@Override
public void check(final SimpleString address,
                  final SimpleString queue,  //exactly what I was looking for
                  final CheckType checkType,
                  final SecurityAuth session) throws Exception {
...

Answer 1

我想你想做的已经通过Artemis-592解决了。只需将地址和队列名与broker.xml中相关的安全设置中的.字符连接起来。一定要把应该隔离的用户放在不同的组里。

明确地说，您不需要实现安全管理器或插件或类似的任何东西。只要进行配置，您就可以处理所需的一切。