[
https://issues.jboss.org/browse/WFLY-6700?page=com.atlassian.jira.plugin....
]
Brian Stansberry resolved WFLY-6700.
------------------------------------
Resolution: Rejected
RunAsRolePermission does not use *.
If this does not work, please re-open.
{code}
<permission>
<class-name>org.jboss.as.controller.access.rbac.RunAsRolePermission</class-name>
<name>SUPERUSER</name>
</permission>
{code}
MBeanServer.isRegistered() fails when the security manager is
enabled
---------------------------------------------------------------------
Key: WFLY-6700
URL:
https://issues.jboss.org/browse/WFLY-6700
Project: WildFly
Issue Type: Bug
Affects Versions: 10.0.0.Final
Reporter: Derek Horton
Assignee: Brian Stansberry
Calling MBeanServer.isRegistered() in a servlet fails with the following error when the
security manager is enabled:
:WFSM000001: Permission check failed (permission
"("org.jboss.as.controller.access.rbac.RunAsRolePermission"
"org.jboss.as.controller.access.rbac.RunAsRolePermission.SUPERUSER")" in
code source "(vfs:/content/SimpleWar.war/WEB-INF/classes <no signer
certificates>)" of "null")
The code looks like the following:
final MBeanServer server = ManagementFactory.getPlatformMBeanServer();
final ObjectName mbeanName = new ObjectName("ima.test:type=imaTest");
System.out.println("*** calling MBeanServer.isRegistered() -
"+server.isRegistered(mbeanName));
The META-INF/jboss-permissions.xml looks like the following:
<?xml version="1.0" encoding="UTF-8"?>
<permissions
xmlns="http://xmlns.jcp.org/xml/ns/javaee"
version="7">
<permission>
<class-name>javax.management.MBeanServerPermission</class-name>
<name>createMBeanServer</name>
</permission>
<permission>
<class-name>org.jboss.as.controller.access.rbac.RunAsRolePermission</class-name>
<name>*</name>
</permission>
</permissions>
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)