[
https://issues.jboss.org/browse/AS7-4769?page=com.atlassian.jira.plugin.s...
]
Darran Lofthouse updated AS7-4769:
----------------------------------
Summary: Adjust /management context to return HTTP status 403 and a DMR response
instead of a redirect when no users defined. (was: Remove no users redirect from
/management context)
Adjust /management context to return HTTP status 403 and a DMR
response instead of a redirect when no users defined.
--------------------------------------------------------------------------------------------------------------------
Key: AS7-4769
URL:
https://issues.jboss.org/browse/AS7-4769
Project: Application Server 7
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 7.1.3.Final (EAP), 7.2.0.Alpha1
For AS 7.1.0 we secured the server by default, to make getting started easier we added an
automatic redirect on the http interface if a user attempts to connect but no users have
been defined, currently this redirect is on both /console and /management
We need to remove the redirect on /management as utilities connecting to this context may
not be web browsers with an ability to do anything about the redirect.
Instead consider a HTTP 403 with a DMR response indicating no users have been defined,
the error message could even contain the URL of the error page allowing users to move from
the tool to their web browser to see the page we provide.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see:
http://www.atlassian.com/software/jira