[jboss-jira] [JBoss JIRA] (WFCORE-276) whoami operation failed when rbac enabled but no roles assigned

[Darran Lofthouse (JIRA)]

     [ https://issues.jboss.org/browse/WFCORE-276?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse updated WFCORE-276:
------------------------------------
    Description: 
Need to double check this is either the CLI making a call in addition to the whoami op and that call is failing or something being accessed by whoami is causing the failure.

Here is the failure for a user with no roles: -

{noformat}
[standalone at localhost:9990 /] [darranl at localhost bin]$ ./jboss-cli.sh -c --no-local-auth
Authenticating against security realm: ManagementRealm
Username: UserTwo
Password: 
[standalone at localhost:9990 /] :whoami
{
    "outcome" => "success",
    "result" => {"identity" => {
        "username" => "UserTwo",
        "realm" => "ManagementRealm"
    }}
}
[standalone at localhost:9990 /] :whoami(verbose=true)
Failed to get the list of the operation properties: "WFLYCTL0313: Unauthorized to execute operation 'read-operation-description' for resource '[]' -- "WFLYCTL0332: Permission denied""
[standalone at localhost:9990 /] 
{noformat}

  was:Need to double check this is either the CLI making a call in addition to the whoami op and that call is failing or something being accessed by whoami is causing the failure.



> whoami operation failed when rbac enabled but no roles assigned
> ---------------------------------------------------------------
>
>                 Key: WFCORE-276
>                 URL: https://issues.jboss.org/browse/WFCORE-276
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: CLI, Domain Management
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>             Fix For: 1.0.0.Alpha14
>
>
> Need to double check this is either the CLI making a call in addition to the whoami op and that call is failing or something being accessed by whoami is causing the failure.
> Here is the failure for a user with no roles: -
> {noformat}
> [standalone at localhost:9990 /] [darranl at localhost bin]$ ./jboss-cli.sh -c --no-local-auth
> Authenticating against security realm: ManagementRealm
> Username: UserTwo
> Password: 
> [standalone at localhost:9990 /] :whoami
> {
>     "outcome" => "success",
>     "result" => {"identity" => {
>         "username" => "UserTwo",
>         "realm" => "ManagementRealm"
>     }}
> }
> [standalone at localhost:9990 /] :whoami(verbose=true)
> Failed to get the list of the operation properties: "WFLYCTL0313: Unauthorized to execute operation 'read-operation-description' for resource '[]' -- "WFLYCTL0332: Permission denied""
> [standalone at localhost:9990 /] 
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.3.8#6338)