[
https://issues.jboss.org/browse/WFLY-2131?page=com.atlassian.jira.plugin....
]
Kabir Khan commented on WFLY-2131:
----------------------------------
As mentioned on
https://github.com/wildfly/wildfly/pull/5147:
This simply strips out the operations which are not valid for the current user.
I have not done, and don't know if the following are necessary:
1) Make the stripping out configurable, e.g. by adding a parameter to the operation
2) Include the stripped out operation names in an operation header (vaguely similar to
what read-resource does for non readable resources)
read-operation-names to return a filtered list of allowed operations
--------------------------------------------------------------------
Key: WFLY-2131
URL:
https://issues.jboss.org/browse/WFLY-2131
Project: WildFly
Issue Type: Sub-task
Components: Domain Management
Reporter: Alexey Loubyansky
Assignee: Kabir Khan
Fix For: 8.0.0.CR1
As discussed on IRC with Kabir, Heiko and me, we agreed that read-operation-names should
return only the operations the caller is permitted to execute.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see:
http://www.atlassian.com/software/jira