. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279 43.2. Role based security for addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . to simplify integration • "FirstMessage" API for scheduled messages • New "view" and "edit" permissions for management operations configurable via security- settings in broker.xml • New sslAutoReload 11.2. Upgrading from 2.28.0 • Due to ARTEMIS-4151 the default access for MBeans not defined in the role-access or allowlist of management.xml is now read only. This is a precautionary measure to ensure

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279 43.2. Role based security for addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . to simplify integration • "FirstMessage" API for scheduled messages • New "view" and "edit" permissions for management operations configurable via security- settings in broker.xml • New sslAutoReload 10.2. Upgrading from 2.28.0 • Due to ARTEMIS-4151 the default access for MBeans not defined in the role-access or allowlist of management.xml is now read only. This is a precautionary measure to ensure

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277 43.2. Role based security for addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . to simplify integration • "FirstMessage" API for scheduled messages • New "view" and "edit" permissions for management operations configurable via security- settings in broker.xml • New sslAutoReload 9.2. Upgrading from 2.28.0 • Due to ARTEMIS-4151 the default access for MBeans not defined in the role-access or allowlist of management.xml is now read only. This is a precautionary measure to ensure

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277 43.2. Role based security for addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . to simplify integration • "FirstMessage" API for scheduled messages • New "view" and "edit" permissions for management operations configurable via security- settings in broker.xml • New sslAutoReload 8.2. Upgrading from 2.28.0 • Due to ARTEMIS-4151 the default access for MBeans not defined in the role-access or allowlist of management.xml is now read only. This is a precautionary measure to ensure

CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Preface 6 Preface What is Apache ActiveMQ Artemis? Apache Upgrading from older versions Due to ARTEMIS-4151 the default access for MBeans not defined in the role-access or allowlist of management.xml is now read only. This is a precautionary measure to ensure management.xml either by changing the default-access (not recommended) or specifically configuring a role-access for the particular MBean in question. Note: this applies to all Versions 9 MBean access

CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Preface 6 Preface What is Apache ActiveMQ Artemis? Apache Upgrading from older versions Due to ARTEMIS-4151 the default access for MBeans not defined in the role-access or allowlist of management.xml is now read only. This is a precautionary measure to ensure management.xml either by changing the default-access (not recommended) or specifically configuring a role-access for the particular MBean in question. Note: this applies to all MBean access including directly

CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Preface 6 Preface What is Apache ActiveMQ Artemis? Apache impact security-settings for MQTT clients which previously only had createDurableQueue for their role. They will now need createNonDurableQueue as well. Again, this only has potential impact for MQTT specific username and role during the authentication process. ii. When login.config is configured with the CertificateLoginModule which causes users to be assigned a username and role corresponding to

CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Preface 6 Preface What is Apache ActiveMQ Artemis? Apache impact security-settings for MQTT clients which previously only had createDurableQueue for their role. They will now need createNonDurableQueue as well. Again, this only has potential impact for MQTT specific username and role during the authentication process. ii. When login.config is configured with the CertificateLoginModule which causes users to be assigned a username and role corresponding to

CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Preface 6 Preface What is Apache ActiveMQ Artemis? Apache changed. Instead of using something like this: ./artemis user add --user guest --password guest --role admin Use this instead: In short, use user-command-user in lieu of user and user-command-password Address Settings. Support logging HTTP access. Add a CLI command to purge a queue. Support user and role manipulation for PropertiesLoginModule via management interfaces. Docker images. Audit logging

CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Preface 6 Preface What is Apache ActiveMQ Artemis? Apache changed. Instead of using something like this: ./artemis user add --user guest --password guest --role admin Use this instead: In short, use user-command-user in lieu of user and user-command- Address Settings. Support logging HTTP access. Add a CLI command to purge a queue. Support user and role manipulation for PropertiesLoginModule via management interfaces. Docker images. Audit logging