[
https://issues.jboss.org/browse/AS7-478?page=com.atlassian.jira.plugin.sy...
]
Brian Stansberry updated AS7-478:
---------------------------------
Fix Version/s: 7.3.0.Alpha1
(was: 7.2.0.Alpha1)
Security checks when recursively reading resources
--------------------------------------------------
Key: AS7-478
URL:
https://issues.jboss.org/browse/AS7-478
Project: Application Server 7
Issue Type: Task
Components: Domain Management
Affects Versions: 7.0.0.Alpha1
Reporter: Emanuel Muckenhuber
Assignee: Darran Lofthouse
Labels: authorization
Fix For: 7.3.0.Alpha1
Currently the "read-resource" operation
(GlobalOperationHandlers.ReadResourceHandler) just clones the subModel when recursively
reading resources. We need to make sure that to also check the permissions for the
children a node contains.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira