Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-4160

RBAC: unable to deploy the same deployment which was already deployed by user from different server-group scope

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Out of Date
    • Affects Version/s: 7.0.0.ER7
    • Fix Version/s: None
    • Component/s: Management
    • Labels:

      Description

      When trying to deploy deployment which was already uploaded to the content repository in different server-group scope, it is not possible to upload the same deployment by user with permissions for different server-group scope.

      This is expected, but the error message is suboptimal:

      Cannot upload deployment: WFLYCTL0216: Management resource '[("deployment" => "tinyClusteredWebapp.war")]' not found

      Steps to reproduce:

      1. unzip jboss-eap-7.0.0.ER7.zip
      2. ./jboss-eap-7.0/bin/add-user.sh -u main -p main
      3. ./jboss-eap-7.0/bin/add-user.sh -u other -p other
      4. ./jboss-eap-7.0/bin/jboss-cli.sh
      5. embed-host-controller
      6. /core-service=management/access=authorization/server-group-scoped-role=main-role:add(base-role=Maintainer, server-groups=[main-server-group])
      7. /core-service=management/access=authorization/role-mapping=main-role:add
      8. /core-service=management/access=authorization/role-mapping=main-role/include=user-main:add(type=USER, name=main)
      9. /core-service=management/access=authorization/server-group-scoped-role=other-role:add(base-role=Maintainer, server-groups=[other-server-group])
      10. /core-service=management/access=authorization/role-mapping=other-role:add
      11. /core-service=management/access=authorization/role-mapping=other-role/include=user-other:add(type=USER, name=other)
      12. /core-service=management/access=authorization:write-attribute(name=provider, value=rbac)
      13. stop-embedded-host-controller
      14. quit
      15. ./jboss-eap-7.0/bin/domain.sh
      16. go to http://localhost:9990/, login as main/main, go to Deployments/Content Repository, press Add, choose Upload a new deployment, upload a JAR/WAR/EAR, then assign it to the main-server-group
      17. log out, login as other/other and try to upload the exact same deployment

      This JIRA is one specific manifestation of JBEAP-4125 and it originates in this EAP 6 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1015524

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  brian.stansberry Brian Stansberry
                  Reporter:
                  lthon Ladislav Thon
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  4 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: