[JBoss JIRA] (WFCORE-1533) Integrate Management Access Control permission assignment with Elytron
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-1533?page=com.atlassian.jira.plugi... ]
Brian Stansberry updated WFCORE-1533:
-------------------------------------
Fix Version/s: 3.0.0.Alpha2
(was: 3.0.0.Alpha1)
> Integrate Management Access Control permission assignment with Elytron
> ----------------------------------------------------------------------
>
> Key: WFCORE-1533
> URL: https://issues.jboss.org/browse/WFCORE-1533
> Project: WildFly Core
> Issue Type: Feature Request
> Components: Domain Management, Security
> Reporter: Darran Lofthouse
> Assignee: Darran Lofthouse
> Labels: affects_elytron
> Fix For: 3.0.0.Alpha2
>
>
> A big portion of management role based access control is taking the assigned roles and then mapping these to the permissions for that role.
> Elytron provides a new PermissionMapper interface that takes a SecurityIdentity and the roles mapped for that identity and returns a PermissionVerifier which can be as simple as a wrapper around a PermissionCollection.
> This will also be a good opportunity to start to move the role mapping out of the core management model to Elytron.
> After that Elytron allows for custom PermissionMapper implementations to be provided and associated with the domain using capabilities and requirements so we arrive at a point where provided the permission checks performed by management are generic enough custom PermissionMapper / PermissionVerifier implementations can be added that may or may not be role based.
> _Note: As with everything we are doing old and new need to be supported in parallel for a while although this may be achieved by providing default Elytron implementations that are wrappers around the old._
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 11 months
[JBoss JIRA] (WFCORE-1528) EAP 7 with secured management become unavailable after ~8 days
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-1528?page=com.atlassian.jira.plugi... ]
Brian Stansberry updated WFCORE-1528:
-------------------------------------
Fix Version/s: 3.0.0.Alpha2
(was: 3.0.0.Alpha1)
> EAP 7 with secured management become unavailable after ~8 days
> --------------------------------------------------------------
>
> Key: WFCORE-1528
> URL: https://issues.jboss.org/browse/WFCORE-1528
> Project: WildFly Core
> Issue Type: Bug
> Components: Domain Management, Security
> Affects Versions: 2.1.0.Final
> Environment: EAP 7.0.0.CR01 2-way ssl over remote https communication
> Reporter: Simeon Pinder
> Assignee: Brian Stansberry
> Priority: Critical
> Fix For: 2.2.0.CR2, 3.0.0.Alpha2
>
>
> Appears there may be an EAP 7.0.0.CR01 2-way ssl issue in domain mode.
> Issue discovered by JON QE after testing for 8 days with SSL.
> JON QE did not see the same issue when running identical test against EAP 6.
> Restarting the remote client(JON Agent) did not repair/fix the issue, and only was repaired after EAP instance restarted.
> See BZ https://bugzilla.redhat.com/show_bug.cgi?id=1330180#c0 for more details.
> JON team would like some evaluation done to determine:
> i)if this is EAP 7 issue or
> ii)somehow just a JON issue
> iii)suggestions on what to do when we try to reproduce properly or ways to shorten reproduce cycle.
> This issue could affect GA release schedules.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 11 months
[JBoss JIRA] (WFCORE-1515) Improve PersistentResourceDefinition to make it easier to register attribute write handlers
by Brian Stansberry (JIRA)
[ https://issues.jboss.org/browse/WFCORE-1515?page=com.atlassian.jira.plugi... ]
Brian Stansberry updated WFCORE-1515:
-------------------------------------
Fix Version/s: 3.0.0.Alpha2
(was: 3.0.0.Alpha1)
> Improve PersistentResourceDefinition to make it easier to register attribute write handlers
> -------------------------------------------------------------------------------------------
>
> Key: WFCORE-1515
> URL: https://issues.jboss.org/browse/WFCORE-1515
> Project: WildFly Core
> Issue Type: Enhancement
> Components: Domain Management
> Reporter: Tomaz Cerar
> Assignee: Tomaz Cerar
> Fix For: 3.0.0.Alpha2
>
>
> Currently if you want to take register custom write handler you need to override whole registerAttributes methods and do it yourself all the way.
> We could add PersistentResourceDefinition.getAttributeHandlers() method that returns
> a Map<String, OperationStepHandler>.
> And then registerAttributes uses the map instead of hardcoding ReloadRequiredWriteAttributeHandler. Default impl just fills the map values with
> ReloadRequiredWriteAttributeHandler.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 11 months
[JBoss JIRA] (WFLY-5464) JDR report contains reference to AS7
by Bartosz Spyrko-Śmietanko (JIRA)
[ https://issues.jboss.org/browse/WFLY-5464?page=com.atlassian.jira.plugin.... ]
Bartosz Spyrko-Śmietanko reassigned WFLY-5464:
----------------------------------------------
Assignee: Bartosz Spyrko-Śmietanko (was: Jesse Jaggars)
> JDR report contains reference to AS7
> ------------------------------------
>
> Key: WFLY-5464
> URL: https://issues.jboss.org/browse/WFLY-5464
> Project: WildFly
> Issue Type: Bug
> Components: JDR
> Affects Versions: 10.0.0.CR2
> Reporter: Marek Kopecký
> Assignee: Bartosz Spyrko-Śmietanko
> Priority: Minor
>
> *Description of problem:*
> JDR report contains some legacy reference to AS7
> *How reproducible:*
> Always
> *Steps to Reproduce:*
> # Create a JDR report using one of provided scripts (depends on OS)
> # Check the created report
> ## cd $JDR_LOCATION
> ## find | grep as7
> *Actual results:*
> {noformat}
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/configuration.json
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/tree.txt
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/dump-services.json
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/deployment-dependencies.txt
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/jarcheck.txt
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/cluster-proxies-configuration.json
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/local-module-dependencies.txt
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/system-properties.txt
> ./jdr_15-10-02_04-28-03_dhcp-10-40-5-38/sos_strings/as7/jndi-view.json
> {noformat}
> *Expected results:*
> No references to AS7
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
9 years, 11 months