RabbitMQ security : how to prevent consumer from creating an exchange -
i have fanout exchange (named : test_exchange) allow users dynamically create queues. in order prevent them create whatever want have restricted access way:
- configure : test_exchange.*
- write : test_exchange.*
- read : test_exchange.*
when creating queue bind exchange, have use following naming convention : test_exchange.(some guid), example : test_exchange.hjlgs6jrtzbuq48fywfizq
this works fine. except can create exchanges if respect naming convention.
according rabbitmq documentation
- queuedeclare : needs configure rights
- queuebind : needs write rights
the problem create exchange need same configure rights.
what solution allow consumer create queue, , bind specific exchange ?
and no other access rights?
Comments
Post a Comment