ActiveMQ topics and security (or Apollo) -

i new active mq. wondering following possible in active mq (or apollo).

essentially, have process generate messages enable or disable particular site. when message (enable/disable) sent activemq, there multiple consumers of message depending on routing key of message. example, if message enable site a, routing key site.a.enable. , site monitoring sitea queue message system wide processor monitors enable/disable messages.

now, think doable in active mq using topics. sitea subscribe topics of site.a.* , system process subscribe topics of site.*.enable , site.*.disable. is best way in activemq?

i want make sure sitea cannot subscribe site.b.* or site.c.* topics. can receive messages site.a.*. , system process can access site.*.* topics. think can done via security plugs. update config file , specify read/write/admin access each site topic , connect user/pass or ldap identify site connecting. is correct? work if sites external?

i want able add new sites minimal configuration/setup. when sitex comes on line, publisher code publish messages other ones, except topic site.x.* created dynamically when first message publish. , consumers can start consuming site.x dynamically too.

this issue is. how can add security site x can access site.x topic "dynamically"? think have edit config file , add security stuff new site. , have stop/start server pick new settings. might able edit config on server, don't think can stop/start every time add new site.

is there better way accomplish this?

thanks!

what have outlined pretty sensible. need create new activemq user each site , give them read write , admin permissions on site.<whatever> using authorization plugin. if using simple security plugins, both authentication , authorization details in activemq.xml, need restart activemq after each site addition.

if want automatically (can't dynamically), need used ldap versions of authentication , authorization plugins, , have script writes appropriate credentials , permissions ldap when site installed. guessing need sort of scripted step add credentials site in first place, shouldn't big deal. pretty sure activemq should pick changes without restart, haven't tried myself, need test this.