[jboss-jira] [JBoss JIRA] (WFLY-1923) Access through unsecured management interface

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-1923?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12798542#comment-12798542 ] 

Darran Lofthouse commented on WFLY-1923:
----------------------------------------

[~jcechace] I can reproduce this error when using the admin console to access the server but can not reproduce anything similar when using the CLI, can you double check Brian's RBAC branch and see if you can reproduse anything over the native interface?

                
> Access through unsecured management interface
> ---------------------------------------------
>
>                 Key: WFLY-1923
>                 URL: https://issues.jboss.org/browse/WFLY-1923
>             Project: WildFly
>          Issue Type: Sub-task
>          Components: Domain Management, Security
>            Reporter: Jakub Cechacek
>            Assignee: Darran Lofthouse
>             Fix For: 8.0.0.CR1
>
>
> It is not possible to read domain-model through unsecured management interface[1] when using Simple provider. As this worked in previous releases I would expect this to do so even after introduction of RBAC.   
> Removing security realm and accessing the interface leads to IAE
> {code}
> ERROR [org.jboss.as.controller.management-operation] (XNIO-1 task-7) JBAS014612: Operation ("whoami") failed - address: ([]): java.lang.IllegalArgumentException: newValue is null
> ...
> {code} 
> [1] removing "security-realm" attribute, thus disabling authentication for given interface. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira