[jboss-jira] [JBoss JIRA] (WFLY-1623) Access Control: read-children-resources

Tue Jul 2 05:34:21 EDT 2013

    [ https://issues.jboss.org/browse/WFLY-1623?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12786826#comment-12786826 ] 

Heiko Braun commented on WFLY-1623:
-----------------------------------

hbraun: the op permissions come from the parent, but the resource permission of each child need to be taken into consideration
[11:30am] kkhan: I think it would need read permission for the parent
[11:31am] hbraun: what if: read parent=false, read-child=true?
[11:31am] kkhan: and then if you don't have access permission to the child type, you get an empty list of children
[11:31am] hbraun: ok, so it boils down from the parent ?
[11:32am] kkhan: and if you don't have read access to the child type you get a list of children, but with the resourecs not 'filled in'
[11:32am] kkhan: hbraun: I think read parent=false, read-child=true would be a configuration error
[11:32am] hbraun: i was thinking if you don't have access to the parent, you cannot execute the op in the first place, right?
[11:32am] kkhan: Yeah, I think so
[11:33am] hbraun: becasue the op handler resdides (logically) with the parent
[11:33am] hbraun: ok, then we are on the same page

> Access Control: read-children-resources
> ---------------------------------------
>
>                 Key: WFLY-1623
>                 URL: https://issues.jboss.org/browse/WFLY-1623
>             Project: WildFly
>          Issue Type: Clarification
>            Reporter: Heiko Braun
>
> What priviledges apply to a read-children-resources operation? The ones of the parent resource or the ones for each child resource?

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira