Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-3924

AttributeParser for ObjectListAttributeDefinitions doesn't differentiate between empty and absent object lists

    XMLWordPrintable

Details

    • Bug
    • Status: Verified (View Workflow)
    • Major
    • Resolution: Done
    • 7.0.0.ER6
    • 7.1.0.DR1
    • Management
    • None
    • DR1

    Description

      Attributes of type ObjectList are left undefined when their enclosing element is empty, which makes it impossible to differentiate an empty object list from an unspecified one.

      The ability to distinguish the two scenarios is important in the security manager subsystem. Consider this configuration:

      <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
          <deployment-permissions>
              <mininum-set>
                   ....
              </minimum-set>
          </deployment-permissions>
      </subsystem>
      

      The maximum-set is absent and this case we want to use a default set with AllPermission. Now consider another configuration:

      <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
          <deployment-permissions>
              <mininum-set/>
              <maximum-set/>
          </deployment-permissions>
      </subsystem>
      

      In this case, maximum-set has been specified but it is empty, which means the admin/user deliberately wants to use an emtpy set, possibly to enforce that no deployments with special permissions requirements get deployed.

      The problem is that both scenarios result in an undefined attribute for the maximum-set, which means that the default AllPermission set ends up being used in both cases. The parser doesn't initialize the attribute with an empty list when the enclosing element is present but is empty. So in the end, both approaches result in an undefined attribute.

      Attachments

        Issue Links

          Activity

            People

              tomazcerar Toma┼ż Cerar (Inactive)
              sguilhen Stefan Guilhen
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: