What are administered objects?

The JMS specification does not require a security-related API and it does not address in detail the process/mechanism for administering objects that exist within a running JMS implementation. Thus, the administration process differs across vendors.

The JMS specification does, however, define two administered objects:

• ConnectionFactory - A client uses this object to create a connection to the JMS server.
• Destination - A client uses this object to set up a "message rendezvous" in the server, specifically, either a topic or a queue.

Typically, a JMS server provide destination-level security, and, of course, JMS applications work through the JMS server. That is, beyond the application, it's possible to establish topic- and queue-based security controls for users, groups, access lists, and so on.