[
https://issues.jboss.org/browse/WFCORE-3839?page=com.atlassian.jira.plugi...
]
Claudio Miranda updated WFCORE-3839:
------------------------------------
Description:
Add filesystem-realm, add a identity, then change the levels to 3, the previously added
identity cannot be recovered anymore. This is due to the directory structure previously
created. Perhaps, the levels attribute should be set at creation time only ?
{code}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:add(path=file_realm)
{"outcome" => "success"}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:add-identity(identity=user1)
{"outcome" => "success"}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:read-identity(identity=user1)
{
"outcome" => "success",
"result" => {
"name" => "user1",
"attributes" => undefined
}
}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:write-attribute(name=levels,value=3)
{
"outcome" => "success",
"response-headers" => {
"operation-requires-reload" => true,
"process-state" => "reload-required"
}
}
[standalone@localhost:9990 /] reload
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:read-identity(identity=user1)
{
"outcome" => "failed",
"failure-description" => "WFLYELY01002: Identity with name [user1]
not found.",
"rolled-back" => true
}
{code}
was:Add filesystem-realm, add a identity, then change the levels to 3, the previously
added identity cannot be recovered anymore. This is due to the directory structure
previously created.
Cannot read-identity of filesystem-realm if change level attribute
later
------------------------------------------------------------------------
Key: WFCORE-3839
URL:
https://issues.jboss.org/browse/WFCORE-3839
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Claudio Miranda
Assignee: Darran Lofthouse
Add filesystem-realm, add a identity, then change the levels to 3, the previously added
identity cannot be recovered anymore. This is due to the directory structure previously
created. Perhaps, the levels attribute should be set at creation time only ?
{code}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:add(path=file_realm)
{"outcome" => "success"}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:add-identity(identity=user1)
{"outcome" => "success"}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:read-identity(identity=user1)
{
"outcome" => "success",
"result" => {
"name" => "user1",
"attributes" => undefined
}
}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:write-attribute(name=levels,value=3)
{
"outcome" => "success",
"response-headers" => {
"operation-requires-reload" => true,
"process-state" => "reload-required"
}
}
[standalone@localhost:9990 /] reload
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:read-identity(identity=user1)
{
"outcome" => "failed",
"failure-description" => "WFLYELY01002: Identity with name [user1]
not found.",
"rolled-back" => true
}
{code}
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)