[jboss-jira] [JBoss JIRA] (WFLY-2088) Error creating server group as scoped role user

[Kabir Khan (JIRA)]

    [ https://issues.jboss.org/browse/WFLY-2088?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12805555#comment-12805555 ] 

Kabir Khan commented on WFLY-2088:
----------------------------------

Heiko, I think you need to talk me through this better, I cannot see the problem. Here are some example queries
{code}

[domain at localhost:9990 /] /server-group=fooBar:add(profile=ha,socket-binding-group=full-ha-sockets){roles=ADMINISTRATOR}
{
    "outcome" => "success",
    "result" => undefined,
    "server-groups" => undefined
}

[domain at localhost:9990 /] /server-group=fooBar:read-resource{roles=MAIN-MAINTAINER}
{
    "outcome" => "failed",
    "failure-description" => "JBAS014807: Management resource '[(\"server-group\" => \"fooBar\")]' not found",
    "rolled-back" => true
}


[domain at localhost:9990 /] /server-group=fooBar:read-resource-description{roles=MAIN-MAINTAINER}
{
    "outcome" => "failed",
    "failure-description" => "JBAS014807: Management resource '[(\"server-group\" => \"fooBar\")]' not found",
    "rolled-back" => true
}


[domain at localhost:9990 /] /server-group=*:read-resource-description{roles=MAIN-MAINTAINER}
{
    "outcome" => "failed",
    "failure-description" => "JBAS014807: Management resource '[(\"server-group\" => \"*\")]' not found",
    "rolled-back" => true
}

[domain at localhost:9990 /] :read-resource-description(recursive=true,access-control=trim-descriptions,operations=true,inherited=false){roles=MAIN-MAINTAINER}
{
    "outcome" => "success",
    "result" => {
        "description" => undefined,
        "attributes" => undefined,
        "operations" => undefined,
        "children" => {
 
--- SNIP --
            "server-group" => {"model-description" => {"*" => {
                "description" => undefined,
                "attributes" => undefined,
                "operations" => undefined,
                "children" => {
---- SNIP ----
                },
                "access-control" => {
                    "default" => {"address" => false},
                    "exceptions" => {"[(\"server-group\" => \"main-server-group\")]" => {
                        "read" => true,
                        "write" => true,
                        "attributes" => {
                            "socket-binding-port-offset" => {
                                "read" => true,
                                "write" => false
                            },
                            "management-subsystem-endpoint" => {
                                "read" => true,
                                "write" => false
                            },
                            "socket-binding-group" => {
                                "read" => true,
                                "write" => true
                            },
                            "profile" => {
                                "read" => true,
                                "write" => true
                            }
                        },
                        "operations" => {
                            "remove" => {"execute" => true},
                            "start-servers" => {"execute" => true},
                            "reload-servers" => {"execute" => true},
                            "restart-servers" => {"execute" => true},
                            "stop-servers" => {"execute" => true},
                            "replace-deployment" => {"execute" => true},
                            "add" => {"execute" => true}
                        }
                    }}
                }
            }}},
---- SNIP ----
{code}
For the last one to run you will need my fix in https://github.com/wildfly/wildfly/pull/5087
                
> Error creating server group as scoped role user
> -----------------------------------------------
>
>                 Key: WFLY-2088
>                 URL: https://issues.jboss.org/browse/WFLY-2088
>             Project: WildFly
>          Issue Type: Bug
>          Components: Domain Management
>            Reporter: Heiko Braun
>            Assignee: Kabir Khan
>             Fix For: 8.0.0.Beta1
>
>
> I've got a scoped role
> {noformat}
> [domain at localhost:9999 /] /core-service=management/access=authorization/server-group-scoped-role=main-MAINTAINER:read-resource
> {
>     "outcome" => "success",
>     "result" => {
>         "base-role" => "MAINTAINER",
>         "server-groups" => ["main-server-group"]
>     }
> }
> {noformat}
> and try to create a server group, which leads to an exception:
> {noformat}
> [domain at localhost:9999 /] /server-group=fooBar:add(){roles=MAIN-MAINTAINER}
> {
>     "outcome" => "failed",
>     "failure-description" => "JBAS014807: Management resource '[(\"server-group\" => \"fooBar\")]' not found",
>     "rolled-back" => true
> }
> {noformat}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira