[jboss-jira] [JBoss JIRA] (ELY-1216) Minus operator in Elytron SASL mechanism selector does not prevent mechanism from occuring later

[Ondrej Lukas (JIRA)]

Ondrej Lukas created ELY-1216:
---------------------------------

             Summary: Minus operator in Elytron SASL mechanism selector does not prevent mechanism from occuring later
                 Key: ELY-1216
                 URL: https://issues.jboss.org/browse/ELY-1216
             Project: WildFly Elytron
          Issue Type: Bug
            Reporter: Ondrej Lukas
            Assignee: Darran Lofthouse
            Priority: Critical


Minus operatar should work as following:
_The - operator deletes all entries that match the given name or predicate, preventing them from occurring later._ [1]

When SASL mechanism selector includes {{-}} operator for some mechanism and this mechanism is added again then this mechanism can be used. It means it violates 'preventing them from occurring later'.

e.g. {{PLAIN}} mechanism can be incorrectly used when selectors like {{selector="-PLAIN PLAIN"}} or {{selector="-PLAIN #ALL"}} are used for client.

[1] https://issues.jboss.org/browse/EAP7-567?focusedCommentId=13408238&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13408238



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)