Re: [wildfly-dev] Pattern defined RBAC scoped roles
On 25 Apr 2016, at 14:26, Ladislav Thon <lthon(a)redhat.com>
wrote:
> How would you propose discriminating these cases?
>
> 1) /subsystem=messaging is not allowed but its children are.
>
> 2) /subsystem=messaging and its children are.
Well, there's not a lot of possibilities with a rigid scheme I'm
proposing. A boolean attribute 'children-only' is the only thing I can
come up with.
I'll be the first to admit that a regexp-based scheme is inherently very
flexible, no doubt about that. (But with great power ...)
To help with this, could
we not add an operation which shows which resources will be granted access?
LT
_______________________________________________
wildfly-dev mailing list
wildfly-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/wildfly-dev