[jboss-jira] [JBoss JIRA] (WFCORE-3796) Incorrect Elytron permission class-name or module should throw exception

Ondrej Lukas (JIRA) issues at jboss.org
Thu May 3 06:27:00 EDT 2018


Ondrej Lukas created WFCORE-3796:
------------------------------------

             Summary: Incorrect Elytron permission class-name or module should throw exception
                 Key: WFCORE-3796
                 URL: https://issues.jboss.org/browse/WFCORE-3796
             Project: WildFly Core
          Issue Type: Bug
          Components: Security
    Affects Versions: 5.0.0.Alpha4
            Reporter: Ondrej Lukas


When non-existent class-name or module (e.g. when there is a typo) is added to any Elytron permission mapper (constant-permission-mapper or simple-permission-mapper) then exception should be thrown. Otherwise it can result to situation when due to a typo some permission is granted to any identity instead of denying it - when permission in used on 'deny' side.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)


More information about the jboss-jira mailing list