diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/rabbit_access_control.erl | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/rabbit_access_control.erl b/src/rabbit_access_control.erl index 73fd6f0e51..a2cc6759d9 100644 --- a/src/rabbit_access_control.erl +++ b/src/rabbit_access_control.erl @@ -180,6 +180,12 @@ check_resource_access(Username, R#resource{name = <<"amq.default">>}, Permission); check_resource_access(Username, + R = #resource{kind = exchange, name = <<"amq.default">>}, + Permission) + when Permission =/= write -> + rabbit_misc:protocol_error(access_refused, + "default exchange is publish-only", []); +check_resource_access(Username, R = #resource{virtual_host = VHostPath, name = Name}, Permission) -> Res = case mnesia:dirty_read({rabbit_user_permission, |