[jboss-jira] [JBoss JIRA] (WFLY-2412) security realms and ldap connections incorrectly hidden by default in domain mode.

security realms and ldap connections incorrectly hidden by default in domain mode. ---------------------------------------------------------------------------------- Key: WFLY-2412 URL: https://issues.jboss.org/browse/WFLY-2412 Project: WildFly Issue Type: Sub-task Security Level: Public(Everyone can see) Components: Domain Management, Security Reporter: Darran Lofthouse Assignee: Darran Lofthouse Fix For: 8.0.0.CR1 Running WildFly master in domain mode and connect using the CLI. {code} [domain@localhost:9990 /] :whoami(verbose=true) { "outcome" => "success", "result" => { "identity" => { "username" => "$local", "realm" => "ManagementRealm" }, "mapped-roles" => ["SuperUser"] } } {code} Although this shows the user has been authenticated against the ManagementRealm is apparently does not exist! {code} [domain@localhost:9990 /] ./core-service=management/security-realm=ManagementRealm:read-resource { "outcome" => "failed", "failure-description" => "JBAS014807: Management resource '[ (\"core-service\" => \"management\"), (\"security-realm\" => \"ManagementRealm\") ]' not found", "rolled-back" => true } {code} First impression is that access control is hiding a sensitive resource even though with the default config it should not.