Class PermissionInfo

java.lang.Object
org.acemq.rabbitmq.admin.PermissionInfo

public final class PermissionInfo extends Object
What a user may do in a virtual host.

Three regular expressions, matched against resource names. They are easy to write too broadly: .* for all three is what most tutorials show and what most services end up with, and it means a service that only publishes to one exchange can also delete every queue in the vhost.

  • Constructor Details

  • Method Details

    • user

      public String user()
    • vhost

      public String vhost()
    • configure

      public String configure()
      Returns:
      what the user may declare and delete
    • write

      public String write()
      Returns:
      what the user may publish to
    • read

      public String read()
      Returns:
      what the user may consume from
    • isUnrestricted

      public boolean isUnrestricted()
      Returns:
      whether all three patterns are .*, which is unrestricted access to the virtual host. Worth checking for in an audit: it is almost never what anybody meant, and it is what everybody copies
    • toString

      public String toString()
      Overrides:
      toString in class Object