Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-407

Permission names are not persisted in the domain model

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 7.0.0.DR7
    • 7.0.0.DR5
    • Management, Security
    • None
    • Hide 
      # run the server
./standalone.sh

# add 2 permission nodes to domain model with the same permission settings:
./jboss-cli.sh -c << EOT
/subsystem=security-manager/deployment-permissions=default/maximum-set=default/permission=test1:add(class=java.io.FilePermission, name="/-", actions=read)
/subsystem=security-manager/deployment-permissions=default/maximum-set=default/permission=test2:add(class=java.io.FilePermission, name="/-", actions=read)
reload
EOT

      The reload fails with:

      14:34:38,100 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 2) WFLYCTL0013: Operation ("add") failed - address: ([
    ("subsystem" => "security-manager"),
    ("deployment-permissions" => "default"),
    ("maximum-set" => "default"),
    ("permission" => "java.io.FilePermission|/-|read")
]) - failure description: "WFLYCTL0212: Duplicate resource [
    (\"subsystem\" => \"security-manager\"),
    (\"deployment-permissions\" => \"default\"),
    (\"maximum-set\" => \"default\"),
    (\"permission\" => \"java.io.FilePermission|/-|read\")
]"
14:34:38,109 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) "WFLYCTL0193: Failed executing subsystem security-manager boot operations"
14:34:38,110 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("parallel-subsystem-boot") failed - address: ([]) - failure description: "\"WFLYCTL0193: Failed executing subsystem security-manager boot operations\""
14:34:38,114 FATAL [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details.
      Show
      # run the server ./standalone.sh # add 2 permission nodes to domain model with the same permission settings: ./jboss-cli.sh -c << EOT /subsystem=security-manager/deployment-permissions= default /maximum-set= default /permission=test1:add(class=java.io.FilePermission, name= "/-" , actions=read) /subsystem=security-manager/deployment-permissions= default /maximum-set= default /permission=test2:add(class=java.io.FilePermission, name= "/-" , actions=read) reload EOT The reload fails with: 14:34:38,100 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 2) WFLYCTL0013: Operation ( "add" ) failed - address: ([ ( "subsystem" => "security-manager" ), ( "deployment-permissions" => " default " ), ( "maximum-set" => " default " ), ( "permission" => "java.io.FilePermission|/-|read" ) ]) - failure description: "WFLYCTL0212: Duplicate resource [ (\ "subsystem\" => \ "security-manager\" ), (\ "deployment-permissions\" => \ " default \" ), (\ "maximum-set\" => \ " default \" ), (\ "permission\" => \ "java.io.FilePermission|/-|read\" ) ]" 14:34:38,109 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread ) "WFLYCTL0193: Failed executing subsystem security-manager boot operations" 14:34:38,110 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread ) WFLYCTL0013: Operation ( "parallel-subsystem-boot" ) failed - address: ([]) - failure description: "\" WFLYCTL0193: Failed executing subsystem security-manager boot operations\"" 14:34:38,114 FATAL [org.jboss.as.server] (Controller Boot Thread ) WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details.

      Permission names used in the security-manager subsystem model are not persisted. It can simply lead to non-bootable server configuration.

      Expected behavior:
      The names used for permission model nodes are persisted in the model (e.g. in an alias attribute).

              kkhan1@redhat.com Kabir Khan
              josef.cacek@gmail.com Josef Cacek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: