Uploaded image for project: 'WildFly Core'
  1. WildFly Core
  2. WFCORE-2401

Permission added using list-add should be validated before adding to Elytron constant-permission-mapper or simple-permission-mapper

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • 3.0.0.Beta7
    • Security
    • Hide
      /subsystem=elytron/constant-permission-mapper=cpm:add
      /subsystem=elytron/constant-permission-mapper=cpm:list-add(name=permissions,value={class-name=java.io.FilePermission})
      reload
      
      Show
      /subsystem=elytron/constant-permission-mapper=cpm:add /subsystem=elytron/constant-permission-mapper=cpm:list-add(name=permissions,value={class-name=java.io.FilePermission}) reload
    • User Experience

      Permission object added using list-add operation should be validated before being added to constant-permission-mapper or simple-permission-mapper.

      The reproducer should behave like

      [standalone@localhost:9990 /] /subsystem=elytron/constant-permission-mapper=cpm:add(permissions=[{class-name=java.io.FilePermission}])
      {
          "outcome" => "failed",
          "failure-description" => {
              "WFLYCTL0080: Failed services" => {"org.wildfly.security.permission-mapper.cpm" => "org.jboss.msc.service.StartException in service org.wildfly.security.permission-mapper.cpm: WFLYELY00021: Exception while creating the permission object for the permission mapping. Please check [class-name], [target-name] (name of permission) and [action] of [java.io.FilePermission].
          Caused by: java.lang.IllegalArgumentException: invalid actions mask"},
              "WFLYCTL0412: Required services that are not installed:" => ["org.wildfly.security.permission-mapper.cpm"],
              "WFLYCTL0180: Services with missing/unavailable dependencies" => undefined
          },
          "rolled-back" => true
      }
      
      

            darran.lofthouse@redhat.com Darran Lofthouse
            okotek@redhat.com Ondrej Kotek
            Ondrej Kotek Ondrej Kotek
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: