[
https://issues.jboss.org/browse/WFLY-1844?page=com.atlassian.jira.plugin....
]
Brian Stansberry commented on WFLY-1844:
----------------------------------------
Yeah, I need to come up with a good classification name. That's the reason for the
TODO. Any suggestions?
deep-copy-subject-mode attribute on Security Subsystem is Readable to
all roles
-------------------------------------------------------------------------------
Key: WFLY-1844
URL:
https://issues.jboss.org/browse/WFLY-1844
Project: WildFly
Issue Type: Sub-task
Components: Domain Management, Security
Reporter: Jakub Cechacek
Fix For: 8.0.0.CR1
According to this spreadsheet [1] deep-copy-subject-mode attribute should be available
only to Administrator role, instead it is Readable for everyone
{code}
[standalone@localhost:9990 /] :whoami(verbose=true)
{
"outcome" => "success",
"result" => {
"identity" => {
"username" => "monitor",
"realm" => "ManagementRealm"
},
"roles" => ["Monitor"]
}
}
[standalone@localhost:9990 /]
/subsystem=security:read-attribute(name=deep-copy-subject-mode)
{
"outcome" => "success",
"result" => false
}
{code}
[1]
https://docs.google.com/spreadsheet/ccc?key=0Au0knNJrYUJhdFlSSEVpdGJpQnlD...
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira