[jboss-jira] [JBoss JIRA] (WFCORE-3796) Incorrect Elytron permission class-name or module should throw exception

Ilia Vassilev (Jira) issues at jboss.org
Wed Oct 24 17:21:00 EDT 2018


     [ https://issues.jboss.org/browse/WFCORE-3796?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ilia Vassilev reassigned WFCORE-3796:
-------------------------------------

    Assignee: Ilia Vassilev


> Incorrect Elytron permission class-name or module should throw exception
> ------------------------------------------------------------------------
>
>                 Key: WFCORE-3796
>                 URL: https://issues.jboss.org/browse/WFCORE-3796
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 5.0.0.Alpha4
>            Reporter: Ondrej Lukas
>            Assignee: Ilia Vassilev
>            Priority: Major
>
> When non-existent class-name or module (e.g. when there is a typo) is added to any Elytron permission mapper (constant-permission-mapper or simple-permission-mapper) then exception should be thrown. Otherwise it can result to situation when due to a typo some permission is granted to any identity instead of denying it - when permission in used on 'deny' side.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)


More information about the jboss-jira mailing list