[jboss-jira] [JBoss JIRA] (WFLY-1789) RBAC: OperationContextImpl.readResourceForUpdate is missing an authorize call

Brian Stansberry (JIRA) jira-events at lists.jboss.org
Wed Jul 31 22:39:27 EDT 2013


    [ https://issues.jboss.org/browse/WFLY-1789?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12794401#comment-12794401 ] 

Brian Stansberry commented on WFLY-1789:
----------------------------------------

Thanks. It was on my mental TODO list, but I trust JIRA more as a TODO list. :)
                
> RBAC: OperationContextImpl.readResourceForUpdate is missing an authorize call
> -----------------------------------------------------------------------------
>
>                 Key: WFLY-1789
>                 URL: https://issues.jboss.org/browse/WFLY-1789
>             Project: WildFly
>          Issue Type: Feature Request
>          Components: Domain Management
>            Reporter: Ladislav Thon
>            Assignee: Brian Stansberry
>
> [This issue was in fact found on 2013-07-09 and is being filled now only for tracking purposes.]
> During code inspection, I found one method in the {{OperationContextImpl}} class that is IMHO missing an {{authorize}} call: {{readResourceForUpdate}}. Compare with {{readModelForUpdate}}. See TODO in the code.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


More information about the jboss-jira mailing list