[openjms-user] SecurityConfiguration doesn't seem to do anything

[Luke M. <lme...@gm...>]

I am having trouble with openjms SecurityConfiguration. I assume that
if I set securityEnabled to true, I should need a user name and
password for the ConnectionFactory.creatConnection(username, password)
method, so that only registered users can create connections. However,
even with securityEnabled="true" I can still create a connection
without a username and password. Am I misunderstanding what the
SecurityConfiguration does? How can I make it so that only registered
users can create connections? I can't find any documentation on this
topic.

I am using openjms 0.7.7-beta1, here is a portion from my config file:

  <SecurityConfiguration securityEnabled="true"/>

  <Users>
    <User name="admin" password="openjms"/>
    <User name="user1" password="password1"/>
  </Users>

Any help would be greatly appreciated.