Posted: Tue Oct 31, 2006 11:39 pm Post subject: Authorization Control on JMS
Apprentice
Joined: 13 Jul 2005 Posts: 33
I have the following scenario:
(A) ------> My application ----------> (B), (C)
Say Publisher publishes Topic(1) to Subscriber(B) and Subscriber(C). I need to setup an application (on my side) such that it checks whether
(i) A is authorized to publish Topic(1)
(ii) B is allowed to accept Topic(1)
(iii) C is allowed to accept Topic(1)
The mechanism to determine whether A is allowed to publish Topic(1) is to check against a UserID/Topic pair on my application end. I am able to retrieve the JMS topic associated with a JMS message. However, I have no clue as to how to determine the publisher or subscriber ID (I am not even sure there is an associated User ID in the first place)!
Does anyone has any simliar experience in designing an application to check on the subject published/subscribed?
You really want to use WebSphere Message Broker, or at least Event Broker (it's cheaper) if you need Topic Level Security.
There was someone else a few months ago (or maybe it was you?) who went down the road of writing their own User Name Server (the component of EB/MB that does topic security). I don't know if they succeeded or not, and I don't remember their user name.
It's not an easy task you're looking at. _________________ I am *not* the model of the modern major general.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum