[JBoss JIRA] (WFCORE-1964) Internal ModelControllerClient should bypass access control by default
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-1964?page=com.atlassian.jira.plugi... ]
Brian Stansberry updated WFCORE-1964:
-------------------------------------
Fix Version/s: 3.0.0.Alpha15
(was: 3.0.0.Alpha14)
> Internal ModelControllerClient should bypass access control by default
> ----------------------------------------------------------------------
>
> Key: WFCORE-1964
> URL: https://issues.jboss.org/browse/WFCORE-1964
> Project: WildFly Core
> Issue Type: Task
> Components: Domain Management, Security
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Priority: Blocker
> Fix For: 3.0.0.Alpha15
>
>
> This is continuing compatibility where in-vm clients can perform actions without triggering management access control.
> It would be nice also if we could find a way to make it possible to selectively disable this for cases where we want identity propagation between applications and the management tier.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (WFCORE-1963) Clean up the 'TODO Elytron' issues.
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-1963?page=com.atlassian.jira.plugi... ]
Brian Stansberry updated WFCORE-1963:
-------------------------------------
Fix Version/s: 3.0.0.Alpha15
(was: 3.0.0.Alpha14)
> Clean up the 'TODO Elytron' issues.
> -----------------------------------
>
> Key: WFCORE-1963
> URL: https://issues.jboss.org/browse/WFCORE-1963
> Project: WildFly Core
> Issue Type: Task
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Priority: Blocker
> Fix For: 3.0.0.Alpha15
>
>
> A few classes have 'TODO Elytron' comments that need addressing.
> Current List: -
> {noformat}
> ./core-model-test/tests/src/test/java/org/jboss/as/core/model/test/access/RoleMappingTestCase.java
> ./jmx/src/test/java/org/jboss/as/jmx/rbac/JmxRbacTestCase.java
> ./remoting/subsystem/src/main/java/org/jboss/as/remoting/RemotingHttpUpgradeService.java
> ./remoting/subsystem/src/main/java/org/jboss/as/remoting/AbstractStreamServerService.java
> ./testsuite/standalone/src/test/java/org/wildfly/core/test/standalone/mgmt/api/core/ConfigurationChangesHistoryTestCase.java
> ./host-controller/src/main/java/org/jboss/as/domain/controller/plan/AbstractServerGroupRolloutTask.java
> ./controller/src/main/java/org/jboss/as/controller/remote/TransactionalProtocolOperationHandler.java
> ./controller/src/main/java/org/jboss/as/controller/ParallelBootOperationStepHandler.java
> ./controller/src/main/java/org/jboss/as/controller/access/management/ManagementSecurityIdentitySupplier.java
> ./server/src/main/java/org/jboss/as/server/mgmt/domain/HostControllerConnectionService.java
> ./domain-management/src/main/java/org/jboss/as/domain/management/security/UserDomainCallbackHandler.java
> ./domain-management/src/main/java/org/jboss/as/domain/management/security/WhoAmIOperation.java
> ./domain-management/src/main/java/org/jboss/as/domain/management/security/PlugInAuthenticationCallbackHandler.java
> ./domain-management/src/main/java/org/jboss/as/domain/management/security/JaasCallbackHandler.java
> ./domain-management/src/main/java/org/jboss/as/domain/management/security/KerberosCallbackHandler.java
> ./domain-management/src/main/java/org/jboss/as/domain/management/security/ClientCertCallbackHandler.java
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month
[JBoss JIRA] (WFCORE-2025) CLI SSLContext Priority
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-2025?page=com.atlassian.jira.plugi... ]
Brian Stansberry updated WFCORE-2025:
-------------------------------------
Fix Version/s: 3.0.0.Alpha15
(was: 3.0.0.Alpha14)
> CLI SSLContext Priority
> -----------------------
>
> Key: WFCORE-2025
> URL: https://issues.jboss.org/browse/WFCORE-2025
> Project: WildFly Core
> Issue Type: Task
> Components: CLI, Security
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Priority: Critical
> Fix For: 3.0.0.Alpha15
>
>
> We have three different places an SSLContext could come from for the CLI: -
> # CLI Configuration
> # AuthenticationClient Configuration
> # Default interactive SSLContext
> We need to ensure they are prioritised as above.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
9 years, 1 month