[Quickfix-developers] Dynamically authorizing sessions by SenderCompID

[J. S. M. <j.s...@gm...>]

Hello everyone,

In my FIX server application (Quickfix + .net bindings), I want to
restrict access by SenderCompID via a database lookup. Right now, I am
only able to update the set of valid SenderCompIDs by either

1) adding each valid SenderCompID to the configuration file parsed by
the SessionSettings class or
2) instantiating a SessionSettings object and setting the set of
allowed SenderCompIDs via the .set(SessionID, Dictionary) method
*before* the SocketAcceptor is created.

Both solutions require a the runner server to be restarted before a
new session ID can be added to the running server. A restart for each
new session would cause undesirable service interruptions for existing
session. I might be able to get around this with some load balancing
tricks, but I'm hopeful there is a simple solution.

QuickfixJ appears to have a hook for custom session providers
(http://www.quickfixj.org/quickfixj/usermanual/1.5.0/usage/acceptor_dynamic.html),
but I cannot find an equivalent method in Quickfix. Is there anything
like this?

I have attempted to modify the SessionSettings after the Acceptor is
created but it doesn't appear that the new settings take. I have yet
to verify this in the source.

Thank you,

Scott