]
Jason Greene updated WFCORE-3266:
---------------------------------
Security: (was: Red Hat Internal)
Simple permission mapper can't represent wildcards or spaces
------------------------------------------------------------
Key: WFCORE-3266
URL:
https://issues.jboss.org/browse/WFCORE-3266
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Jason Greene
Assignee: Jason Greene
Priority: Blocker
The inability of the simple-permission-mapper to handle wildcards forces the user to
utilize complex logical permission mapper chains to achieve common use cases. This makes
simple changes, such as adding an additional permission to a user unnecessarily complex.
In addition to construction complexity, modifications performed by non-experts are likely
to lead to unintended behavior, including accidentally granting permissions to a user that
should not have them.
This is readily apparent by even our default configuration requiring the use of 3
permission mappers to handle the basic case of denying anonymous users and allowing
everyone else.