[jboss-jira] [JBoss JIRA] (WFCORE-3796) Incorrect Elytron permission class-name or module should throw exception
Ondrej Lukas (JIRA)
issues at jboss.org
Thu May 3 06:27:00 EDT 2018
Ondrej Lukas created WFCORE-3796:
------------------------------------
Summary: Incorrect Elytron permission class-name or module should throw exception
Key: WFCORE-3796
URL: https://issues.jboss.org/browse/WFCORE-3796
Project: WildFly Core
Issue Type: Bug
Components: Security
Affects Versions: 5.0.0.Alpha4
Reporter: Ondrej Lukas
When non-existent class-name or module (e.g. when there is a typo) is added to any Elytron permission mapper (constant-permission-mapper or simple-permission-mapper) then exception should be thrown. Otherwise it can result to situation when due to a typo some permission is granted to any identity instead of denying it - when permission in used on 'deny' side.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
More information about the jboss-jira
mailing list