[JBoss JIRA] (GTNMGMT-39) User still able to perform REST operations after deleted or permissions revoked
8:36 a.m.
Tomas Kyjovsky created GTNMGMT-39:
-------------------------------------
Summary: User still able to perform REST operations after deleted or
permissions revoked
Key: GTNMGMT-39
URL: https://issues.jboss.org/browse/GTNMGMT-39
Project: GateIn Management
Issue Type: Bug
Security Level: Public (Everyone can see)
Reporter: Tomas Kyjovsky
Assignee: Nick Scavelli
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:10 a.m.
[
https://issues.jboss.org/browse/GTNMGMT-39?page=com.atlassian.jira.plugin...
]
Tomas Kyjovsky updated GTNMGMT-39:
----------------------------------
Affects Version/s: 1.0.0-GA
User still able to perform REST operations after deleted or
permissions revoked
-------------------------------------------------------------------------------
Key: GTNMGMT-39
URL: https://issues.jboss.org/browse/GTNMGMT-39
Project: GateIn Management
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: rest
Affects Versions: 1.0.0-GA
Reporter: Tomas Kyjovsky
Assignee: Nick Scavelli
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:10 a.m.
[
https://issues.jboss.org/browse/GTNMGMT-39?page=com.atlassian.jira.plugin...
]
Tomas Kyjovsky updated GTNMGMT-39:
----------------------------------
Component/s: rest
CLI is not affected by this problem. Deleted user cannot authenticate to the console nor
use mgmt connect command.
User still able to perform REST operations after deleted or
permissions revoked
-------------------------------------------------------------------------------
Key: GTNMGMT-39
URL: https://issues.jboss.org/browse/GTNMGMT-39
Project: GateIn Management
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: rest
Affects Versions: 1.0.0-GA
Reporter: Tomas Kyjovsky
Assignee: Nick Scavelli
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
11:03 a.m.
[
https://issues.jboss.org/browse/GTNMGMT-39?page=com.atlassian.jira.plugin...
]
Nick Scavelli commented on GTNMGMT-39:
--------------------------------------
I take it if you close your browser or delete cookies you are prompted to authenticate
again and cannot access as expected ?
User still able to perform REST operations after deleted or
permissions revoked
-------------------------------------------------------------------------------
Key: GTNMGMT-39
URL: https://issues.jboss.org/browse/GTNMGMT-39
Project: GateIn Management
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: rest
Affects Versions: 1.0.0-GA
Reporter: Tomas Kyjovsky
Assignee: Nick Scavelli
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:38 a.m.
[
https://issues.jboss.org/browse/GTNMGMT-39?page=com.atlassian.jira.plugin...
]
Tomas Kyjovsky commented on GTNMGMT-39:
---------------------------------------
I am prompted but I still can access the resource. Only after server restart (and
disabling autocreation of user "john") the access is denied as expected.
User still able to perform REST operations after deleted or
permissions revoked
-------------------------------------------------------------------------------
Key: GTNMGMT-39
URL: https://issues.jboss.org/browse/GTNMGMT-39
Project: GateIn Management
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: rest
Affects Versions: 1.0.0-GA
Reporter: Tomas Kyjovsky
Assignee: Nick Scavelli
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
8:52 a.m.
[
https://issues.jboss.org/browse/GTNMGMT-39?page=com.atlassian.jira.plugin...
]
Tomas Kyjovsky commented on GTNMGMT-39:
---------------------------------------
Similar issue occurs when adding permissions to users: access still denied after
permissions have been granted.
User still able to perform REST operations after deleted or
permissions revoked
-------------------------------------------------------------------------------
Key: GTNMGMT-39
URL: https://issues.jboss.org/browse/GTNMGMT-39
Project: GateIn Management
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: rest
Affects Versions: 1.0.0-GA
Reporter: Tomas Kyjovsky
Assignee: Nick Scavelli
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:40 a.m.
[
https://issues.jboss.org/browse/GTNMGMT-39?page=com.atlassian.jira.plugin...
]
Nick Scavelli resolved GTNMGMT-39.
----------------------------------
Resolution: Won't Fix
This is the way JAAS is handled in JBoss AS. See
https://community.jboss.org/wiki/CachingLoginCredentials for more details. Flushing the
cache works.
User still able to perform REST operations after deleted or
permissions revoked
-------------------------------------------------------------------------------
Key: GTNMGMT-39
URL: https://issues.jboss.org/browse/GTNMGMT-39
Project: GateIn Management
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: rest
Affects Versions: 1.0.0-GA
Reporter: Tomas Kyjovsky
Assignee: Nick Scavelli
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
4579
days inactive
4601
days old
6 comments
2 participants
participants (2)
-
Nick Scavelli (JIRA) -
Tomas Kyjovsky (JIRA)