Ondrej Lukas created ELY-1216: --------------------------------- Summary: Minus operator in Elytron SASL mechanism selector does not prevent mechanism from occuring later Key: ELY-1216 URL: https://issues.jboss.org/browse/ELY-1216 Project: WildFly Elytron Issue Type: Bug Reporter: Ondrej Lukas Assignee: Darran Lofthouse Priority: Critical Minus operatar should work as following: _The - operator deletes all entries that match the given name or predicate, preventing them from occurring later._ [1] When SASL mechanism selector includes {{-}} operator for some mechanism and this mechanism is added again then this mechanism can be used. It means it violates 'preventing them from occurring later'. e.g. {{PLAIN}} mechanism can be incorrectly used when selectors like {{selector="-PLAIN PLAIN"}} or {{selector="-PLAIN #ALL"}} are used for client. [1] https://issues.jboss.org/browse/EAP7-567?focusedCommentId=13408238&pa... -- This message was sent by Atlassian JIRA (v7.2.3#72005)