]
Martin Choma commented on WFCORE-3839:
--------------------------------------
Does this prevent changing attribute manually in standalone.xml? Do we have such creation
only attributes in model now?
Cannot read-identity of filesystem-realm if change level attribute
later
------------------------------------------------------------------------
Key: WFCORE-3839
URL:
https://issues.jboss.org/browse/WFCORE-3839
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Claudio Miranda
Assignee: Darran Lofthouse
Add filesystem-realm, add a identity, then change the levels to 3, the previously added
identity cannot be recovered anymore. This is due to the directory structure previously
created. Perhaps, the levels attribute should be set at creation time only ?
{code}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:add(path=file_realm)
{"outcome" => "success"}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:add-identity(identity=user1)
{"outcome" => "success"}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:read-identity(identity=user1)
{
"outcome" => "success",
"result" => {
"name" => "user1",
"attributes" => undefined
}
}
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:write-attribute(name=levels,value=3)
{
"outcome" => "success",
"response-headers" => {
"operation-requires-reload" => true,
"process-state" => "reload-required"
}
}
[standalone@localhost:9990 /] reload
[standalone@localhost:9990 /]
/subsystem=elytron/filesystem-realm=file_realm1:read-identity(identity=user1)
{
"outcome" => "failed",
"failure-description" => "WFLYELY01002: Identity with name [user1]
not found.",
"rolled-back" => true
}
{code}