gerco/IssuesTest — Issue #57: Limit usage of "Clear messages"
Author: gerco
Created: 2012-03-09 17:23:08+00:00
State: open
Labels: SonicMessageManager

Currently, any user that is able to use SMM is able to clear the message from any queue, including the ones they are not able to read. This is caused by "Clear messages" being a management operation and this bypasses any ACLs in Sonic MQ.

Clear messages can be limited by using management permissions, but since this is impossible to implement with SDM it's not really an option to rely on this.