txlong poll reads any queue

[Robert Collins]

This seems undesirable to me, because any misconfiguration in permissions would trivially allow effectively direct access to suck down messages. (We've had misconfigurations sneak in).

I suggest that txlongpoll itself enforce the queue namespace we have (longpoll + random) giving us a defence in depth approach.

This is needed to go live with txlongpoll.

[Gavin Panella (allenap)]

Can this be addressed with RabbitMQ's access control mechanisms [1]
which appear to allow quite fine-grained control over what users may
do?

[1] http://www.rabbitmq.com/access-control.html

[Robert Collins (lifeless)]

The point of this is to provide extra insurance over everything being
configured Just Right. The rabbit acls are regexps - and its not that
hard to get such a thing wrong.

[Gavin Panella (allenap)]

Note to whoever fixes this: because txlongpoll is intended not just
for Launchpad, the namespace/pattern ought to be configurable. Right
now everything is done via command line arguments, so adding another
is probably the expedient approach.