September 2017 - jboss-jira - Jboss List Archives

[JBoss JIRA] (WFCORE-3308) Use separate capability for cacheable security realms

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFCORE-3308?page=com.atlassian.jira.plugi... ] Darran Lofthouse updated WFCORE-3308: ------------------------------------- Description: This would eliminate the need for a runtime type check which can abort services starting which actually could be quite late. One issue however is realms already have a separate capability to represent if they are modifiable so this could lead to more permutations of custom and custom modifiable realms - this may be fine but worth double checking. > Use separate capability for cacheable security realms > ----------------------------------------------------- > > Key: WFCORE-3308 > URL: https://issues.jboss.org/browse/WFCORE-3308 > Project: WildFly Core > Issue Type: Enhancement > Components: Security > Affects Versions: 3.0.3.Final > Reporter: Darran Lofthouse > Priority: Critical > > This would eliminate the need for a runtime type check which can abort services starting which actually could be quite late. > One issue however is realms already have a separate capability to represent if they are modifiable so this could lead to more permutations of custom and custom modifiable realms - this may be fine but worth double checking. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFLY-9240) SecurityDomain.getCurrent() throws NPE when invoking SLSB using a Weld thread

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFLY-9240?page=com.atlassian.jira.plugin.... ] Darran Lofthouse resolved WFLY-9240. ------------------------------------ Fix Version/s: 11.0.0.Final Resolution: Done > SecurityDomain.getCurrent() throws NPE when invoking SLSB using a Weld thread > ----------------------------------------------------------------------------- > > Key: WFLY-9240 > URL: https://issues.jboss.org/browse/WFLY-9240 > Project: WildFly > Issue Type: Bug > Components: CDI / Weld, Security > Affects Versions: 11.0.0.Beta1, 11.0.0.CR1 > Reporter: Martin Kouba > Assignee: Darran Lofthouse > Priority: Critical > Fix For: 11.0.0.Final > > > -The integration code used by Weld 3 to propagate the security context of the current thread to different threads (needed for async events CDI 2.0 feature) is not able to obtain the current {{org.wildfly.security.auth.server.SecurityDomain}} anymore.- > -The invocation of [SecurityDomain.getCurrent()|https://github.com/weld/wildfly/blob/11.0.0.B...] returns {{null}}.- > UPDATE: The original description was wrong. We wrongly assumed that Elytron is active for a deployment by default which isn't the case. > NullPointerException being reported DURING calls to SecurityDomain.getCurrent(): > {noformat} > Caused by: java.lang.NullPointerException > at java.util.concurrent.ConcurrentHashMap.get(ConcurrentHashMap.java:936) > at org.wildfly.security.auth.server.SecurityDomain.getCurrent(SecurityDomain.java:171) > at org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:74) > at org.jboss.weld.tests.event.async.context.security.Printer$$$view2.print(Unknown Source) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke(Method.java:498) > at org.jboss.weld.util.reflection.Reflections.invokeAndUnwrap(Reflections.java:411) > at org.jboss.weld.module.ejb.EnterpriseBeanProxyMethodHandler.invoke(EnterpriseBeanProxyMethodHandler.java:128) > at org.jboss.weld.bean.proxy.EnterpriseTargetBeanInstance.invoke(EnterpriseTargetBeanInstance.java:56) > at org.jboss.weld.module.ejb.InjectionPointPropagatingEnterpriseTargetBeanInstance.invoke(InjectionPointPropagatingEnterpriseTargetBeanInstance.java:68) > at org.jboss.weld.bean.proxy.ProxyMethodHandler.invoke(ProxyMethodHandler.java:106) > at org.jboss.weld.tests.event.async.context.security.Printer$Proxy$_$$_Weld$EnterpriseProxy$.print(Unknown Source) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > {noformat} > Note that this worked on WildFly *11.0.0.Alpha1*. > It's also possible that the test (see also steps to reproduce) is wrong. A review/help from a security expert would be appreciated. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-3308) Use separate capability for cacheable security realms

by Darran Lofthouse (JIRA)

Darran Lofthouse created WFCORE-3308: ---------------------------------------- Summary: Use separate capability for cacheable security realms Key: WFCORE-3308 URL: https://issues.jboss.org/browse/WFCORE-3308 Project: WildFly Core Issue Type: Enhancement Components: Security Affects Versions: 3.0.3.Final Reporter: Darran Lofthouse Priority: Critical -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-3238) Unable to use principal name with spaces within the simple-permission-mapper (Elytron)

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFCORE-3238?page=com.atlassian.jira.plugi... ] Darran Lofthouse resolved WFCORE-3238. -------------------------------------- Fix Version/s: 3.0.4.Final Resolution: Done > Unable to use principal name with spaces within the simple-permission-mapper (Elytron) > -------------------------------------------------------------------------------------- > > Key: WFCORE-3238 > URL: https://issues.jboss.org/browse/WFCORE-3238 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Josef Cacek > Assignee: Darran Lofthouse > Priority: Critical > Fix For: 3.0.4.Final > > > The {{simple-permission-mapper}} fails to handle principal names which include space character in them. > The problem seems to be caused by storing the names into one attribute (space-separated values) in Elytron subsystem schema. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2506) Roles are not assigned if access=identity uses Elytron security domain based on legacy security domain

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2506?page=com.atlassian.jira.plugi... ] Darran Lofthouse reassigned WFCORE-2506: ---------------------------------------- Assignee: (was: Darran Lofthouse) > Roles are not assigned if access=identity uses Elytron security domain based on legacy security domain > ------------------------------------------------------------------------------------------------------ > > Key: WFCORE-2506 > URL: https://issues.jboss.org/browse/WFCORE-2506 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Ondrej Lukas > > In case when Elytron security domain, which uses legacy security domain (provided through elytron-integration in legacy security subsystem), is used for identity inflow in access=identity, and authentication is provided by security domain which uses some Elytron security realm, then no roles/groups from legacy security domain are assigned to the secured identity. See reproducer for more details. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (WFCORE-2506) Roles are not assigned if access=identity uses Elytron security domain based on legacy security domain

by Darran Lofthouse (JIRA)

[ https://issues.jboss.org/browse/WFCORE-2506?page=com.atlassian.jira.plugi... ] Darran Lofthouse updated WFCORE-2506: ------------------------------------- Priority: Major (was: Critical) > Roles are not assigned if access=identity uses Elytron security domain based on legacy security domain > ------------------------------------------------------------------------------------------------------ > > Key: WFCORE-2506 > URL: https://issues.jboss.org/browse/WFCORE-2506 > Project: WildFly Core > Issue Type: Bug > Components: Security > Reporter: Ondrej Lukas > Assignee: Darran Lofthouse > > In case when Elytron security domain, which uses legacy security domain (provided through elytron-integration in legacy security subsystem), is used for identity inflow in access=identity, and authentication is provided by security domain which uses some Elytron security realm, then no roles/groups from legacy security domain are assigned to the secured identity. See reproducer for more details. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (DROOLS-1739) Missing creation of the segment memory of a subnetwork when the main segment memory is created from a prototype

by Mario Fusco (JIRA)

Mario Fusco created DROOLS-1739: ----------------------------------- Summary: Missing creation of the segment memory of a subnetwork when the main segment memory is created from a prototype Key: DROOLS-1739 URL: https://issues.jboss.org/browse/DROOLS-1739 Project: Drools Issue Type: Bug Components: core engine Reporter: Mario Fusco Assignee: Mario Fusco When creating the memory of a segment having as root a beta node which is also the tip of a subnetwork, the engine should also create the segment memory of the subnetwork itself. This is not happening if the segment is created from a prototype. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (DROOLS-1468) Support OOPath in accumulate functions

by Mario Fusco (JIRA)

[ https://issues.jboss.org/browse/DROOLS-1468?page=com.atlassian.jira.plugi... ] Mario Fusco resolved DROOLS-1468. --------------------------------- Resolution: Won't Do I discussed this with [~mark.proctor] and we agreed that oopath shouldn't be used in an accumulate function. > Support OOPath in accumulate functions > -------------------------------------- > > Key: DROOLS-1468 > URL: https://issues.jboss.org/browse/DROOLS-1468 > Project: Drools > Issue Type: Feature Request > Components: core engine > Affects Versions: 7.0.0.Beta7 > Reporter: Tibor Zimányi > Assignee: Mario Fusco > Priority: Minor > Labels: oopath > > It would be nice to have the ability to use OOPath in accumulate functions. E.g. _sum(/fact/property)_. > Example of a rule: > import org.drools.compiler.oopath.*; > global java.lang.Object globalVar > rule R when > accumulate ( Adult() ; $accumulateResult: sum(/children/age) ) > then > kcontext.getKieRuntime().setGlobal(\"globalVar\", $accumulateResult); > end -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (DROOLS-1468) Support OOPath in accumulate functions

by Mario Fusco (JIRA)

[ https://issues.jboss.org/browse/DROOLS-1468?page=com.atlassian.jira.plugi... ] Mario Fusco updated DROOLS-1468: -------------------------------- Sprint: 2017 Week 36-37 > Support OOPath in accumulate functions > -------------------------------------- > > Key: DROOLS-1468 > URL: https://issues.jboss.org/browse/DROOLS-1468 > Project: Drools > Issue Type: Feature Request > Components: core engine > Affects Versions: 7.0.0.Beta7 > Reporter: Tibor Zimányi > Assignee: Mario Fusco > Priority: Minor > Labels: oopath > > It would be nice to have the ability to use OOPath in accumulate functions. E.g. _sum(/fact/property)_. > Example of a rule: > import org.drools.compiler.oopath.*; > global java.lang.Object globalVar > rule R when > accumulate ( Adult() ; $accumulateResult: sum(/children/age) ) > then > kcontext.getKieRuntime().setGlobal(\"globalVar\", $accumulateResult); > end -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

[JBoss JIRA] (DROOLS-1738) Test not soundslike operator

by Jozef Marko (JIRA)

Jozef Marko created DROOLS-1738: ----------------------------------- Summary: Test not soundslike operator Key: DROOLS-1738 URL: https://issues.jboss.org/browse/DROOLS-1738 Project: Drools Issue Type: Task Components: core engine Reporter: Jozef Marko Assignee: Jozef Marko Introduce test that will fire rules containing "not soundslike" operator. -- This message was sent by Atlassian JIRA (v7.2.3#72005)

8 years, 7 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira September 2017