[teiid-issues] [JBoss JIRA] Updated: (TEIID-840) admin-roles appears to be ignored and allegedly privileged users cannot execute methods appropriately

[Paul Nittel (JIRA)]

     [ https://jira.jboss.org/jira/browse/TEIID-840?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Paul Nittel updated TEIID-840:
------------------------------

    Attachment: deploy.properties
                admin-roles.properties


Files for your amusement.

> admin-roles appears to be ignored and allegedly privileged users cannot execute methods appropriately
> -----------------------------------------------------------------------------------------------------
>
>                 Key: TEIID-840
>                 URL: https://jira.jboss.org/jira/browse/TEIID-840
>             Project: Teiid
>          Issue Type: Bug
>          Components: AdminApi
>    Affects Versions: 6.2.0
>         Environment: fedora 10, Teiid 6.2 RC1
>            Reporter: Paul Nittel
>            Assignee: Steven Hawkins
>         Attachments: admin-roles.properties, deploy.properties
>
>
> Connecting as admin, I am able to execute this command string to see the group(s) to which pnittel belongs:
> c=getGroupsForUser( "pnittel"); for (cb:c) {   print( cb.getName() ); }
> Connecting as pnittel, I cannot execute that same command. pnittel is a member of the itgroup and that group is assigned all three roles. I'm attaching deploy.properties and admin-roles.properties.
> Here's the dialog:
> admin $ connectAsAdmin("pnittel","mm","mm://localhost:31000");
> conn-1[mm://localhost:31000] $ c=getGroupsForUser( "pnittel"); for (cb:c) {   print( cb.getName() ); }
> Remote exception: Administrator [pnittel at TheDap], session [3] does not have any required role [Admin.SystemAdmin] so is not authorized to perform the action [getGroupsForUser]. ... Original type hierarchy [org.teiid.adminapi.AdminProcessingException, org.teiid.adminapi.AdminException, com.metamatrix.core.MetaMatrixCoreException].
> conn-1[mm://localhost:31000] $ // Error: EvalError: The collection, array, map, iterator, or enumeration portion of a for statement cannot be null. : at Line: 3 : in file: <unknown file> : for ( cb : c ) { 
> conn-1[mm://localhost:31000] $ conn-1[mm://localhost:31000] $ disconnect();
> admin $ connectAsAdmin("admin","teiid","mm://localhost:31000");
> conn-2[mm://localhost:31000] $ c=getGroupsForUser( "pnittel"); for (cb:c) {   print( cb.getName() ); }
> conn-2[mm://localhost:31000] $ itgroup at TheDap

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira