[jboss-jira] [JBoss JIRA] (WFLY-2005) Host scoped role adding JVM config

[Heiko Braun (JIRA)]

Heiko Braun created WFLY-2005:
---------------------------------

             Summary: Host scoped role adding JVM config
                 Key: WFLY-2005
                 URL: https://issues.jboss.org/browse/WFLY-2005
             Project: WildFly
          Issue Type: Bug
          Components: Domain Management
            Reporter: Heiko Braun
            Assignee: Brian Stansberry
             Fix For: 8.0.0.Beta1


Although the operation permissions for add() are given, a host scoped fails to create a new JVM on a specific the role is scoped to:

{noformat}

[domain at localhost:9990 /] /core-service=management/access=authorization/host-scoped-role=stage_hosts:read-resource
{
    "outcome" => "success",
    "result" => {
        "base-role" => "maintainer",
        "hosts" => ["slave"]
    }
}


[domain at localhost:9990 /] /host=slave/jvm=small:add(){roles=STAGE_HOSTS}
{
    "outcome" => "failed",
    "result" => undefined,
    "failure-description" => {"host-failure-descriptions" => [("slave" => "JBAS013456: Unauthorized to execute operation 'add' for resource '[
    (\"host\" => \"slave\"),
    (\"jvm\" => \"small\")
]' -- \"Permission denied\"")]},
    "rolled-back" => true
}
{noformat}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira