credential-reference capability-reference constraint ---------------------------------------------------- Key: WFCORE-2245 URL: https://issues.jboss.org/browse/WFCORE-2245 Project: WildFly Core Issue Type: Bug Components: Security Reporter: Claudio Miranda Assignee: Darran Lofthouse Fix For: 3.0.0.Beta7 There attribute credential-reference is defined in many subsystems as below. Looks like the capability-reference constraint should be set in the "store" field of the value-type, therefore I request a review on this capability-constraint placement. {code} "credential-reference" => { "type" => OBJECT, "description" => "Credential (from Credential Store) to authenticate on data source", "expressions-allowed" => false, "required" => false, "nillable" => true, "capability-reference" => "org.wildfly.security.credential-store", "access-constraints" => {"sensitive" => { "credential" => {"type" => "core"}, "data-source-security" => {"type" => "datasources"} }}, "value-type" => { "store" => { "type" => STRING, "description" => "The name of the credential store holding the alias to credential", "expressions-allowed" => false, "required" => false, "nillable" => true, "min-length" => 1L, "max-length" => 2147483647L }, "alias" => { "type" => STRING, "description" => "The alias which denotes stored secret or credential in the store", "expressions-allowed" => false, "required" => false, "nillable" => true, "min-length" => 1L, "max-length" => 2147483647L }, "type" => { "type" => STRING, "description" => "The type of credential this reference is denoting", "expressions-allowed" => false, "required" => false, "nillable" => true, "min-length" => 1L, "max-length" => 2147483647L }, "clear-text" => { "type" => STRING, "description" => "Secret specified using clear text (check credential store way of supplying credential/secrets to services)", "expressions-allowed" => false, "required" => false, "nillable" => true, "min-length" => 1L, "max-length" => 2147483647L } }, "access-type" => "read-write", "storage" => "configuration", "restart-required" => "all-services" }, {code}