]
Jason Greene updated WFCORE-3266:
---------------------------------
Fix Version/s: 3.0.2.CR1
3.0.2.Final
Simple permission mapper can't represent wildcards or spaces
------------------------------------------------------------
Key: WFCORE-3266
URL:
https://issues.jboss.org/browse/WFCORE-3266
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Jason Greene
Assignee: Jason Greene
Priority: Blocker
Fix For: 3.0.2.CR1, 3.0.2.Final
The inability of the simple-permission-mapper to handle wildcards forces the user to
utilize complex logical permission mapper chains to achieve common use cases. This makes
simple changes, such as adding an additional permission to a user unnecessarily complex.
In addition to construction complexity, modifications performed by non-experts are likely
to lead to unintended behavior, including accidentally granting permissions to a user that
should not have them.
This is readily apparent by even our default configuration requiring the use of 3
permission mappers to handle the basic case of denying anonymous users and allowing
everyone else.