Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-4160

RBAC: unable to deploy the same deployment which was already deployed by user from different server-group scope


    • Icon: Bug Bug
    • Resolution: Obsolete
    • Icon: Major Major
    • None
    • 7.0.0.ER7
    • Management

      When trying to deploy deployment which was already uploaded to the content repository in different server-group scope, it is not possible to upload the same deployment by user with permissions for different server-group scope.

      This is expected, but the error message is suboptimal:

      Cannot upload deployment: WFLYCTL0216: Management resource '[("deployment" => "tinyClusteredWebapp.war")]' not found

      Steps to reproduce:

      1. unzip jboss-eap-7.0.0.ER7.zip
      2. ./jboss-eap-7.0/bin/add-user.sh -u main -p main
      3. ./jboss-eap-7.0/bin/add-user.sh -u other -p other
      4. ./jboss-eap-7.0/bin/jboss-cli.sh
      5. embed-host-controller
      6. /core-service=management/access=authorization/server-group-scoped-role=main-role:add(base-role=Maintainer, server-groups=[main-server-group])
      7. /core-service=management/access=authorization/role-mapping=main-role:add
      8. /core-service=management/access=authorization/role-mapping=main-role/include=user-main:add(type=USER, name=main)
      9. /core-service=management/access=authorization/server-group-scoped-role=other-role:add(base-role=Maintainer, server-groups=[other-server-group])
      10. /core-service=management/access=authorization/role-mapping=other-role:add
      11. /core-service=management/access=authorization/role-mapping=other-role/include=user-other:add(type=USER, name=other)
      12. /core-service=management/access=authorization:write-attribute(name=provider, value=rbac)
      13. stop-embedded-host-controller
      14. quit
      15. ./jboss-eap-7.0/bin/domain.sh
      16. go to http://localhost:9990/, login as main/main, go to Deployments/Content Repository, press Add, choose Upload a new deployment, upload a JAR/WAR/EAR, then assign it to the main-server-group
      17. log out, login as other/other and try to upload the exact same deployment

      This JIRA is one specific manifestation of JBEAP-4125 and it originates in this EAP 6 Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1015524

            bstansbe@redhat.com Brian Stansberry
            lthon@redhat.com Ladislav Thon
            0 Vote for this issue
            4 Start watching this issue