Darran Lofthouse created WFCORE-2231:
----------------------------------------
Summary: Deprecate the realm attribute on RBAC role mappings
Key: WFCORE-2231
URL:
https://issues.jboss.org/browse/WFCORE-2231
Project: WildFly Core
Issue Type: Task
Components: Domain Management, Security
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: 3.0.0.Alpha23
As we migrate to WildFly Elytron the realm attribute in role mapping is no longer relevant
and has no meaning in the pure Elytron case and so should be deprecated.
It was originally added so each management interface could be associated with a different
security realm and then roles assigned based on which realm was used for authentication.
WildFly Elytron solves this in a different way by allowing different security domains to
be used for the management interfaces and then a third domain can optionally be used for
the identity to inflow to - this inflowing allows for the role mapping to be re-applied so
there is no longer a need for realm specific mappings in the RBAC mappings (which are also
now optional).
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)