1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
<schema package="org.apache.qpid.acl">
<!--
* Copyright (c) 2008 The Apache Software Foundation
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
-->
<class name="Acl">
<property name="brokerRef" type="objId" references="org.apache.qpid.broker:Broker" access="RO" index="y" parentRef="y"/>
<property name="policyFile" type="lstr" access="RO" desc="Name of the policy file"/>
<property name="enforcingAcl" type="bool" access="RO" desc="Currently Enforcing ACL"/>
<property name="transferAcl" type="bool" access="RO" desc="Any transfer ACL rules in force"/>
<property name="lastAclLoad" type="absTime" access="RO" desc="Timestamp of last successful load of ACL"/>
<property name="maxConnections" type="uint16" access="RO" desc="Maximum allowed connections"/>
<property name="maxConnectionsPerIp" type="uint16" access="RO" desc="Maximum allowed connections"/>
<property name="maxConnectionsPerUser" type="uint16" access="RO" desc="Maximum allowed connections"/>
<property name="maxQueuesPerUser" type="uint16" access="RO" desc="Maximum allowed queues"/>
<statistic name="aclDenyCount" type="count64" unit="request" desc="Number of ACL requests denied"/>
<statistic name="connectionDenyCount" type="count64" unit="connection" desc="Number of connections denied"/>
<statistic name="queueQuotaDenyCount" type="count64" unit="queue" desc="Number of queue creations denied"/>
<method name="reloadACLFile" desc="Reload the ACL file"/>
<!--
Lookup is a general object lookup
User Name
Action
Object
Object Name
Property Map consisting of <"name" "value"> string pairs.
-->
<method name="Lookup" desc="Lookup: user action object [objectName [propertyMap]]">
<arg name="userId" dir="I" type="lstr"/>
<arg name="action" dir="I" type="lstr"/>
<arg name="object" dir="I" type="lstr"/>
<arg name="objectName" dir="I" type="lstr"/>
<arg name="propertyMap" dir="I" type="map"/>
<arg name="result" dir="O" type="lstr"/>
</method>
<!--
LookupPublish is a specific lookup for a PUBLISH EXCHANGE fastpath
User Name
Exchange Name
Routing Key
-->
<method name="LookupPublish" desc="Lookup PUBLISH EXCHANGE: user exchangeName routingKey">
<arg name="userId" dir="I" type="lstr"/>
<arg name="exchangeName" dir="I" type="lstr"/>
<arg name="routingKey" dir="I" type="lstr"/>
<arg name="result" dir="O" type="lstr"/>
</method>
</class>
<eventArguments>
<arg name="action" type="sstr"/>
<arg name="arguments" type="map"/>
<arg name="objectName" type="sstr"/>
<arg name="objectType" type="sstr"/>
<arg name="reason" type="lstr"/>
<arg name="userId" type="sstr"/>
<arg name="clientAddr" type="sstr"/>
<arg name="queueName" type="sstr"/>
</eventArguments>
<event name="allow" sev="inform" args="userId, action, objectType, objectName, arguments"/>
<event name="deny" sev="notice" args="userId, action, objectType, objectName, arguments"/>
<event name="connectionDeny" sev="notice" args="userId, clientAddr"/>
<event name="queueQuotaDeny" sev="notice" args="userId, queueName"/>
<event name="fileLoaded" sev="inform" args="userId"/>
<event name="fileLoadFailed" sev="error" args="userId, reason"/>
</schema>
|
