How to allow a client only to subscribe to a specific queue in the Solace broker

I am trying to allow a user to subscribe only to a specific queue without the possibility of publishing to the same queue. When I go to the ACL profile of my user, I can only set up which topics it can subscribe to or publish. But then, if I try to connect to a queue that doesn't have any of the same topics, I am able to do it. What am I missing?

When configuring your acl-profile you can use a queue's network topic to configure access controls, so to only allow a client to consume from a specific queue called YourQueueName you can configure your ACL profile as follows: an ACL Profile:

• Set the Publish Topic default action to Disallow
• Add an exception for your specific queue using the pattern: #P2P/QUE/YourQueueName