tags:

views:

8

answers:

0

Hello! I'm looking to configure ActiveMQ such that only predefined topics are allowed. I've found doc on defining topics within the config XML but can't quite determine how I'd prevent any connecting user from just creating dynamic topics at will.

Authorization of the users will be done remotely so I can't use the authorization plugin samples I've read about.

I've played around a bit with a BrokerFilter, throwing a security exception when an inappropriate destination is inbound on the addDestination() method, and this does appear to thwart clients connecting with an intent to consume, but clients connecting with an intent to produce appear to be unaffected (the sends 'appear' to work). I'm unsure if they are actually working or just being ignored.

Any thoughts? Thanks much!