[jboss-jira] [JBoss JIRA] Updated: (AS7-478) Security checks when recursively reading resources
[
https://issues.jboss.org/browse/AS7-478?page=com.atlassian.jira.plugin.sy...
]
Darran Lofthouse updated AS7-478:
---------------------------------
Fix Version/s: 7.1.0.Alpha1
(was: 7.0.0.CR1)
Will require some form of authentiation interceptor post 7.0.0
Security checks when recursively reading resources
--------------------------------------------------
Key: AS7-478
URL: https://issues.jboss.org/browse/AS7-478
Project: Application Server 7
Issue Type: Task
Components: Domain Management
Affects Versions: 7.0.0.Alpha1
Reporter: Emanuel Muckenhuber
Assignee: Darran Lofthouse
Fix For: 7.1.0.Alpha1
Currently the "read-resource" operation
(GlobalOperationHandlers.ReadResourceHandler) just clones the subModel when recursively
reading resources. We need to make sure that to also check the permissions for the
children a node contains.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira