[jboss-jira] [JBoss JIRA] (AS7-6578) Domain Model global permission block

[David Lloyd (JIRA)]

    [ https://issues.jboss.org/browse/AS7-6578?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12759185#comment-12759185 ] 

David Lloyd commented on AS7-6578:
----------------------------------

Okay after working with this stuff for a while, I have more concrete requirements:

# Allow the domain model to configure a minimum permission set for deployments.  If not given, this set is empty.
#* This is the permission set that will always be granted to deployments.  Note that the deployment processor may grant some additional permissions by default beyond this set.
# Allow the domain model to configure a maximum permission set for deployments.  If not given, this set's value is {{AllPermission}}.
#* This is the maximal permission set allowed to be granted, so any deployment-declared permissions which are not granted by this block will cause deployment to fail as per EE.6.2.2.1.
# Allow the domain model to configure a global minimum/maximum permission set for JDK {{lib/ext}} extensions and for filesystem JARs
#* Note that we should support {{permissions.xml}} in such JARs as well.
# Allow additional minimum/maximum permission blocks for {{lib/ext}} extensions (by name) and filesystem JARs (by name) which override the global configuration
                
> Domain Model global permission block
> ------------------------------------
>
>                 Key: AS7-6578
>                 URL: https://issues.jboss.org/browse/AS7-6578
>             Project: Application Server 7
>          Issue Type: Sub-task
>          Components: Security
>            Reporter: Anil Saldhana
>            Assignee: Anil Saldhana
>             Fix For: 8.0.0.Alpha1
>
>
> The domain model  (domain.xml/standalone.xml) needs to have a block for assigning global permissions, that can be overridden by module level permissions as well as deployment permissions.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira