[infinispan-issues] [JBoss JIRA] (ISPN-10219) security session doc with wrong declarative configuration

Ryan Emerson (Jira) issues at jboss.org
Wed May 22 11:42:00 EDT 2019


     [ https://issues.jboss.org/browse/ISPN-10219?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ryan Emerson updated ISPN-10219:
--------------------------------
    Fix Version/s: 10.0.0.Beta4
                   9.4.14.Final


> security session doc with wrong declarative configuration
> ---------------------------------------------------------
>
>                 Key: ISPN-10219
>                 URL: https://issues.jboss.org/browse/ISPN-10219
>             Project: Infinispan
>          Issue Type: Bug
>          Components: Documentation-Core, Security
>    Affects Versions: 9.4.13.Final
>            Reporter: Gustavo Lira e Silva
>            Assignee: Gustavo Lira e Silva
>            Priority: Major
>             Fix For: 10.0.0.Beta4, 9.4.14.Final
>
>
> Session 23.1.3. Embedded Configuration has some wrong declarative configurations.
> The following declarative configuration has some errors:
> {code:xml}
> <cache-container default-cache="secured">
>    <security>
>       <authorization enabled="true">
>          <identity-role-mapper />
>          <role name="admin" permissions="ALL" />
>          <role name="reader" permissions="READ" />
>          <role name="writer" permissions="WRITE" />
>          <role name="supervisor" permissions="READ WRITE EXEC BULK" />
>       </authorization>
>    </security>
>    <local-cache name="secured">
>       <security>
>          <authorization roles="admin reader writer supervisor" />
>       </security>
>    </local-cache>
> </cache-container>
> {code}
> # name attribute is mandatory into cache-container
> # 'enabled' isn't an allowed attribute for the 'authorization' element. The 'authorization' element doesn't allow any attributes
> # There's no permission BULK
> The XML should be like this:
> {code:xml}
> <cache-container name="secure" default-cache="secured">
>    <security>
>       <authorization>
>          <identity-role-mapper />
>          <role name="admin" permissions="ALL" />
>          <role name="reader" permissions="READ" />
>          <role name="writer" permissions="WRITE" />
>          <role name="supervisor" permissions="READ WRITE EXEC" />
>       </authorization>
>    </security>
>    <local-cache name="secured">
>       <security>
>          <authorization roles="admin reader writer supervisor" />
>       </security>
>    </local-cache>
> </cache-container>
> {code}



--
This message was sent by Atlassian Jira
(v7.12.1#712002)


More information about the infinispan-issues mailing list