Community
Participate
Working Groups
(imported from launchpad) The mosquitto_auth_acl_check allows to control if a client is allowed to publish on a given topic. For different reasons, it may be interesting to control if a client has the right to publish with the retain option on a given topic. Eg: if we have no control on the client part, the client could flood the broker by publishing retained messages leading to a memory overflow on the broker.
Part of the authentication/access control review for 1.5.