You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 13 Next »

ACL file format for brokers.

 Notes on file formats

  • File order - first match top to bottom.
  • group lists can be extended to subsequent lines by using the '\'character
  • All Permission lines need to be specified on a single line
  • The last line of the file is defaulted to be 'acl deny'
  • Group names may contain only a-z, A-Z, 0-9, '-','_'
group <group-name> = [user-list] [group-name-list]

action = [consume|
    publish|
    create|
    access|
    bind|
    unbind|
    delete|
    purge]

permission = [allow|allow-log|deny|deny-log]
property = [temporary|durable|owner]
object = [queue|exchange|routingkey]

acl permission [<group-name|user-name>] [action] [object=<object-name>] [property = <property-value>]

Example file:

group admin ted martin
group user-consume martin ted

acl allow carlt create exchange=carl.*
acl allow guest bind exchange=amq.topic routingkey=stocks.ibm.#  owner=self
acl allow user-consume create queue=tmp.*
acl allow admin

acl allow bind owner=self
acl allow consume owner=self
acl allow publisher publish temporary=true
acl allow publisher create queue=RequestQueue

acl allow consumer consume temporary=true
acl allow consumer create temporary=true
acl deny
  • No labels