8.3.7. ACL Definition Reference
The following tables show the possible values for
permission
, action
, object
, and property
in an ACL rules file.
allow |
Allow the action
|
allow-log |
Allow the action and log the action in the event log
|
deny |
Deny the action
|
deny-log |
Deny the action and log the action in the event log
|
consume |
Applied when subscriptions are created
|
publish |
Applied on a per message basis on publish message transfers, this rule consumes the most resources
|
create |
Applied when an object is created, such as bindings, queues, exchanges, links
|
access |
Applied when an object is read or accessed
|
bind |
Applied when objects are bound together
|
unbind |
Applied when objects are unbound
|
delete |
Applied when objects are deleted
|
purge |
Similar to delete but the action is performed on more than one object
|
update |
Applied when an object is updated
|
queue |
A queue
|
exchange |
An exchange
|
broker |
The broker
|
link |
A federation or inter-broker link
|
method |
Management or agent or broker method
|
name |
String. Object name, such as a queue name or exchange name.
|
durable |
Boolean. Indicates the object is durable
|
routingkey |
String. Specifies routing key
|
autodelete |
Boolean. Indicates whether or not the object gets deleted when the connection is closed
|
exclusive |
Boolean. Indicates the presence of an
exclusive flag
|
type |
String. Type of object, such as topic, fanout, or xml
|
alternate |
String. Name of the alternate exchange
|
queuename |
String. Name of the queue (used only when the object is something other than
queue
|
schemapackage |
String. QMF schema package name
|
schemaclass |
String. QMF schema class name
|
policytype |
String. The limit policy for a queue. Only used in rules for queue creation.
|
maxqueuesize |
Integer. The largest value of the maximum queue size (in bytes) with which a queue is allowed to be created. Only used in rules for queue creation.
|
maxqueuecount |
Integer. The largest value of the maximum queue depth (in messages) that a queue is allowed to be created. Only used in rules for queue creation.
|