[teiid-issues] [JBoss JIRA] (TEIID-3919) Add support for using Security mapping modules in security domain for teiid

[Ramesh Reddy (JIRA)]

     [ https://issues.jboss.org/browse/TEIID-3919?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ramesh Reddy resolved TEIID-3919.
---------------------------------
    Fix Version/s: 9.0
       Resolution: Done


To test create a user with no roles using the "add-user.sh", deploy any VDB, and then try to access the odata web interface, you should be denied access because, odata by default requires a "odata" role.  Now stop the server and add

{code}
                    <mapping>
                        <mapping-module code="SimpleRoles" type="role">
                            <module-option name="user" value="odata"/>
                        </mapping-module>
                    </mapping>
{code}

to "teiid-security" security-domain, restart the server and test above odata web interface it will work this time. Please note, mapping module ONLY designed to map roles, its not been added to map principles or credentials as features in Teiid.

> Add support for using Security mapping modules in security domain for teiid
> ---------------------------------------------------------------------------
>
>                 Key: TEIID-3919
>                 URL: https://issues.jboss.org/browse/TEIID-3919
>             Project: Teiid
>          Issue Type: Feature Request
>          Components: Server
>            Reporter: Debbie Steigner
>            Assignee: Ramesh Reddy
>             Fix For: 9.0, 8.12.5
>
>
> Currently we only use the RoleMapping login module for role mapping in the teiid security domain.  Can we have the code call the mapping module as well - https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-6.4/red-hat-jboss-enterprise-application-platform-64-how-to-configure-identity-management/chapter-7-configuring-a-security-domain-to-use-a-security-mapping
> See https://access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-6.4/red-hat-jboss-enterprise-application-platform-64-login-module-reference/chapter-9-security-mapping-modules for the full list of available mapping modules.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)