[JBoss JIRA] (WFLY-1625) WebConsole: Ability to mock different roles
by Harald Pehl (JIRA)
[ https://issues.jboss.org/browse/WFLY-1625?page=com.atlassian.jira.plugin.... ]
Harald Pehl edited comment on WFLY-1625 at 7/3/13 3:30 PM:
-----------------------------------------------------------
Available roles:
- Monitor
- Configurator
- Operator
- Maintainer
- Deployer
- Administrator
- Auditor
- SuperUser
To execute a DMR operation on behalf of a specific role, one must add the {{operation-headers}} node and the {{roles}} attribute:
{code}
{
"operation" => "foo",
"address" => [("foo", "bar")],
"operation-headers" =>
{
"roles" => "operator"
}
}
{code}
The roles are case insensitive (see {{org.jboss.as.controller.access.rbac.MockRoleMapper}} for details)
was (Author: harald.pehl):
Available roles:
- Monitor
- Configurator
- Operator
- Maintainer
- Deployer
- Administrator
- Auditor
- SuperUser
To execute a DMR operation on behalf of a specific role, one must add the {{operation-headers}} node and the {{roles}} attribute:
{code}
{
"operation" => "foo",
"address" => [("foo", "bar")],
"operation-headers" =>
{
"roles" => "operator"
}
}
{code}
The roles are case insensitive (see {org.jboss.as.controller.access.rbac.MockRoleMapper} for details)
> WebConsole: Ability to mock different roles
> -------------------------------------------
>
> Key: WFLY-1625
> URL: https://issues.jboss.org/browse/WFLY-1625
> Project: WildFly
> Issue Type: Feature Request
> Components: Web Console
> Reporter: Heiko Braun
> Assignee: Harald Pehl
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years
[JBoss JIRA] (WFLY-1625) WebConsole: Ability to mock different roles
by Harald Pehl (JIRA)
[ https://issues.jboss.org/browse/WFLY-1625?page=com.atlassian.jira.plugin.... ]
Harald Pehl edited comment on WFLY-1625 at 7/3/13 3:30 PM:
-----------------------------------------------------------
Available roles:
- Monitor
- Configurator
- Operator
- Maintainer
- Deployer
- Administrator
- Auditor
- SuperUser
To execute a DMR operation on behalf of a specific role, one must add the {{operation-headers}} node and the {{roles}} attribute:
{code}
{
"operation" => "foo",
"address" => [("foo", "bar")],
"operation-headers" =>
{
"roles" => "operator"
}
}
{code}
The roles are case insensitive (see {org.jboss.as.controller.access.rbac.MockRoleMapper} for details)
was (Author: harald.pehl):
Available roles:
- Monitor
- Configurator
- Operator
- Maintainer
- Deployer
- Administrator
- Auditor
- SuperUser
To execute a DMR operation on behalf of a specific role, one must add the {{operation-headers}} node and the {{roles}} attribute:
{code}
{
"operation" => "foo",
"address" => [("foo", "bar")],
"operation-headers" =>
{
"roles" => "operator"
}
}
{code}
> WebConsole: Ability to mock different roles
> -------------------------------------------
>
> Key: WFLY-1625
> URL: https://issues.jboss.org/browse/WFLY-1625
> Project: WildFly
> Issue Type: Feature Request
> Components: Web Console
> Reporter: Heiko Braun
> Assignee: Harald Pehl
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years
[JBoss JIRA] (DROOLS-183) KieBase doesn't load drl files if it doesn't feel like it on Windows
by Mario Fusco (JIRA)
[ https://issues.jboss.org/browse/DROOLS-183?page=com.atlassian.jira.plugin... ]
Mario Fusco resolved DROOLS-183.
--------------------------------
Resolution: Done
> KieBase doesn't load drl files if it doesn't feel like it on Windows
> --------------------------------------------------------------------
>
> Key: DROOLS-183
> URL: https://issues.jboss.org/browse/DROOLS-183
> Project: Drools
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Affects Versions: 6.0.0.Beta4
> Reporter: Geoffrey De Smet
> Assignee: Mario Fusco
> Priority: Blocker
> Fix For: 6.0.0.CR1
>
>
> The OptaPlanner zip's example works perfectly for me, but a user trying the same zip on windows doesn't see any working examples. The problem is that KieBase behaves differently and outputs this warning on his system:
> {code}
> 2013-06-29 10:24:16,998 [AWT-EventQueue-0] WARN No files found for KieBase
> defaultKieBase
> {code}
> Note: it worked well for Beta3 on his system (and it works well for me on linux with Beta4).
> This is probably due to the fact that the way optaplanner's code needs to jump through the KieBase hoops works for Beta3, but the hoops has been changed for Beta4 somehow.
> Here's that optaplanner code:
> https://github.com/droolsjbpm/optaplanner/blob/master/optaplanner-core/sr...
> Here's the full e-mail thread:
> {code}
> Hi
> I performed the download version beta4 to view examples of optaplanner and
> none is opening.
> Below the return of console windows.
> "Usage: runExamples.bat"
> "For example: runExamples.bat"
> "Some notes:"
> "- Working dir should be the directory of this script."
> "- Java is recommended to be JDK and java 6 for optimal performance"
> "- The environment variable JAVA_HOME should be set to the JDK installation
> dire
> ctory"
> " For example: set JAVA_HOME="C:\Program Files\Java\jdk1.6.0"
> ECHO está desativado.
> "Starting examples app..."
> 2013-06-29 10:24:16,998 [AWT-EventQueue-0] WARN No files found for KieBase
> defa
> ultKieBase
> 2013-06-29 10:24:18,680 [AWT-EventQueue-0] INFO Loaded:
> data\curriculumcourse\unsolved\comp05.xml
> Exception in thread "AWT-EventQueue-0" java.lang.RuntimeException:
> Unexpected gl
> obal [scoreHolder]
> at
> org.drools.core.common.AbstractWorkingMemory.setGlobal(AbstractWorkin
> gMemory.java:532)
> at
> org.drools.core.impl.StatefulKnowledgeSessionImpl.setGlobal(StatefulK
> nowledgeSessionImpl.java:360)
> at
> org.optaplanner.core.impl.score.director.drools.DroolsScoreDirector.r
> esetKieSession(DroolsScoreDirector.java:85)
> at
> org.optaplanner.core.impl.score.director.drools.DroolsScoreDirector.s
> etWorkingSolution(DroolsScoreDirector.java:76)
> at
> org.optaplanner.examples.common.business.SolutionBusiness.openSolutio
> n(SolutionBusiness.java:222)
> at
> org.optaplanner.examples.common.swingui.SolverAndPersistenceFrame$Loa
> dAction.actionPerformed(SolverAndPersistenceFrame.java:178)
> at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
> at javax.swing.AbstractButton$Handler.actionPerformed(Unknown
> Source)
> at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown
> Source)
> at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
> at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown
> Source)
> at java.awt.Component.processMouseEvent(Unknown Source)
> at javax.swing.JComponent.processMouseEvent(Unknown Source)
> at java.awt.Component.processEvent(Unknown Source)
> at java.awt.Container.processEvent(Unknown Source)
> at java.awt.Component.dispatchEventImpl(Unknown Source)
> at java.awt.Container.dispatchEventImpl(Unknown Source)
> at java.awt.Component.dispatchEvent(Unknown Source)
> at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
> at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
> at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
> at java.awt.Container.dispatchEventImpl(Unknown Source)
> at java.awt.Window.dispatchEventImpl(Unknown Source)
> at java.awt.Component.dispatchEvent(Unknown Source)
> at java.awt.EventQueue.dispatchEventImpl(Unknown Source)
> at java.awt.EventQueue.access$200(Unknown Source)
> at java.awt.EventQueue$3.run(Unknown Source)
> at java.awt.EventQueue$3.run(Unknown Source)
> at java.security.AccessController.doPrivileged(Native Method)
> at java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown
> Source)
> at java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown
> Source)
> at java.awt.EventQueue$4.run(Unknown Source)
> at java.awt.EventQueue$4.run(Unknown Source)
> at java.security.AccessController.doPrivileged(Native Method)
> at java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown
> Source)
> at java.awt.EventQueue.dispatchEvent(Unknown Source)
> at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown
> Source)
> at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
> at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown
> Source)
> at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
> at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
> at java.awt.EventDispatchThread.run(Unknown Source)
> 2013-06-29 10:24:25,920 [AWT-EventQueue-0] INFO Loaded:
> C:\Users\l049904\Downlo
> ads\optaplanner-distribution-6.0.0.Beta4\optaplanner-distribution-6.0.0.Beta4\ex
> amples\data\curriculumcourse\unsolved\comp02.xml
> Exception in thread "AWT-EventQueue-0" java.lang.RuntimeException:
> Unexpected global [scoreHolder]
> at
> org.drools.core.common.AbstractWorkingMemory.setGlobal(AbstractWorkingMemory.java:532)
> at
> org.drools.core.impl.StatefulKnowledgeSessionImpl.setGlobal(StatefulKnowledgeSessionImpl.java:360)
> at
> org.optaplanner.core.impl.score.director.drools.DroolsScoreDirector.r
> esetKieSession(DroolsScoreDirector.java:85)
> at
> org.optaplanner.core.impl.score.director.drools.DroolsScoreDirector.s
> etWorkingSolution(DroolsScoreDirector.java:76)
> at
> org.optaplanner.examples.common.business.SolutionBusiness.openSolutio
> n(SolutionBusiness.java:222)
> at
> org.optaplanner.examples.common.swingui.SolverAndPersistenceFrame$Ope
> nAction.actionPerformed(SolverAndPersistenceFrame.java:289)
> at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
> at javax.swing.AbstractButton$Handler.actionPerformed(Unknown
> Source)
> at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown
> Source)
> at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
> at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown
> Source)
> at java.awt.Component.processMouseEvent(Unknown Source)
> at javax.swing.JComponent.processMouseEvent(Unknown Source)
> at java.awt.Component.processEvent(Unknown Source)
> at java.awt.Container.processEvent(Unknown Source)
> at java.awt.Component.dispatchEventImpl(Unknown Source)
> at java.awt.Container.dispatchEventImpl(Unknown Source)
> at java.awt.Component.dispatchEvent(Unknown Source)
> at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
> at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
> at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
> at java.awt.Container.dispatchEventImpl(Unknown Source)
> at java.awt.Window.dispatchEventImpl(Unknown Source)
> at java.awt.Component.dispatchEvent(Unknown Source)
> at java.awt.EventQueue.dispatchEventImpl(Unknown Source)
> at java.awt.EventQueue.access$200(Unknown Source)
> at java.awt.EventQueue$3.run(Unknown Source)
> at java.awt.EventQueue$3.run(Unknown Source)
> at java.security.AccessController.doPrivileged(Native Method)
> at java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown
> Source)
> at java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown
> Source)
> at java.awt.EventQueue$4.run(Unknown Source)
> at java.awt.EventQueue$4.run(Unknown Source)
> at java.security.AccessController.doPrivileged(Native Method)
> at java.security.ProtectionDomain$1.doIntersectionPrivilege(Unknown
> Source)
> at java.awt.EventQueue.dispatchEvent(Unknown Source)
> at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown
> Source)
> at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
> at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown
> Source)
> at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
> at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
> at java.awt.EventDispatchThread.run(Unknown Source)
> In every instance can not open or import files. Xml
> In version Beta3 was possible.
> Thanks
> --
> View this message in context: http://drools.46999.n3.nabble.com/Time-Scheduling-Routing-tp4024446p40246...
> {code}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years
[JBoss JIRA] (WFLY-490) Domain Management Role Based Access Control
by Darran Lofthouse (JIRA)
[ https://issues.jboss.org/browse/WFLY-490?page=com.atlassian.jira.plugin.s... ]
Darran Lofthouse updated WFLY-490:
----------------------------------
Summary: Domain Management Role Based Access Control (was: Simple Domain Management Role Based Permissions)
> Domain Management Role Based Access Control
> -------------------------------------------
>
> Key: WFLY-490
> URL: https://issues.jboss.org/browse/WFLY-490
> Project: WildFly
> Issue Type: Sub-task
> Components: Domain Management, Security
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Priority: Blocker
> Labels: Authorization
> Fix For: 8.0.0.CR1
>
>
> Implement some coarse permissions for domain operations. Possibly allowing a break down for subsystem, profile, server, server-group - maybe read - write - execute.
> Also consider confidentiality in exchange e.g. Can read metrics over http but must use https to add new server.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years
[JBoss JIRA] (WFLY-1635) Ensure security realms assign users to groups and not roles by default.
by Darran Lofthouse (JIRA)
Darran Lofthouse created WFLY-1635:
--------------------------------------
Summary: Ensure security realms assign users to groups and not roles by default.
Key: WFLY-1635
URL: https://issues.jboss.org/browse/WFLY-1635
Project: WildFly
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Priority: Critical
Fix For: 8.0.0.Alpha3
Currently we only use group/role assignment within the ApplicationRealm where there is an assumption of a 1:1 mapping between a group and a role.
Instead by default the <authorization /> section of a <security-realm /> should be used to load group membership information.
Within access control the group to role mapping will happen at a later point as it needs to take into account the address or an operation.
For situations where a 1:1 mapping can be assumed we will add a configuration option on the <authorization /> element - 'map-groups-to-roles' default will be false.
For backwards compatibility the ApplicationRealm we ship will have 'map-groups-to-roles' set to true. Where an older schema is read we will assume this attribute was set to true for consistency.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
13 years