[jboss-jira] [JBoss JIRA] (WFLY-1923) Access through unsecured management interface

[Ladislav Thon (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-1923?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ladislav Thon updated WFLY-1923:
--------------------------------

    Labels: rbac-filed-by-qa  (was: )

    
> Access through unsecured management interface
> ---------------------------------------------
>
>                 Key: WFLY-1923
>                 URL: https://issues.jboss.org/browse/WFLY-1923
>             Project: WildFly
>          Issue Type: Sub-task
>          Components: Domain Management, Security
>            Reporter: Jakub Cechacek
>            Assignee: Darran Lofthouse
>              Labels: rbac-filed-by-qa
>             Fix For: 8.0.0.Beta1
>
>
> It is not possible to read domain-model through unsecured management interface[1] when using Simple provider. As this worked in previous releases I would expect this to do so even after introduction of RBAC.   
> Removing security realm and accessing the interface leads to IAE
> {code}
> ERROR [org.jboss.as.controller.management-operation] (XNIO-1 task-7) JBAS014612: Operation ("whoami") failed - address: ([]): java.lang.IllegalArgumentException: newValue is null
> ...
> {code} 
> [1] removing "security-realm" attribute, thus disabling authentication for given interface. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira