]
Darran Lofthouse moved WFLY-7669 to WFCORE-2367:
------------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-2367 (was: WFLY-7669)
Component/s: Security
(was: Security)
Fix Version/s: 4.0.0.Alpha1
(was: 11.0.0.Alpha1)
Misleading description of identity-realm
----------------------------------------
Key: WFCORE-2367
URL:
https://issues.jboss.org/browse/WFCORE-2367
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Jan Tymel
Assignee: Darran Lofthouse
Fix For: 4.0.0.Alpha1
There is a misleading description of {{identity-realm}} in DMR [1]. It says _"A
security realm definition where identities are represented in the management model."_
whereas an XSD documentation says _"Realm definition for a realm which contains a
single pre-defined identity."_.
In general, the XSD description looks clearer to me. Moreover, the {{identities}} word
may be misleading since {{identity-realm}}'s purpose is to _"to store one
identity, with one attribute and no credential"_ [3]. Thus I would suggest to also
change the description of {{attribute-values}} from
_"The values associated with the identities attribute."_ to something like
_"The values associated with the identity attributes."_
Suggestions for improvement:
* Change description {{identity-realm}} according to XSD
* Change description of {{attribute-values}} attr (in both DMR and XSD)
* to consider: unify descriptions in XSD and DMR
[1] /subsystem=elytron/identity-realm=somerealm:read-resource-description
[2]
https://github.com/wildfly-security/elytron-subsystem/blob/master/src/mai...
[3] HipChats's WildFly Elytron chat room on Nov 21