-
Task
-
Resolution: Unresolved
-
Major
-
None
-
None
It does not feel that a deployment should need all of the Elytron permissions assigning:
deployment.addAsResource(createPermissionsXmlAsset(new PropertyPermission("ts.timeout.factor", "read"),
new ElytronPermission("setRunAsPrincipal"),
new ElytronPermission("handleSecurityEvent"),
new ChangeRoleMapperPermission("ejb")), "META-INF/jboss-permissions.xml");
The failures were happening in EJB interceptors so it felt like a deployment should not need to be aware of these.
- incorporates
-
WFLY-19717 Remove unused Elytron permissions in MDBRoleTestCase, RunAsPrincipalTestCase, RunAsTestCase, RunAsEjbMdbTestCase, RunAsMDBUnitTestCase and LegacyCompliantPrincipalPropagationTestCase
-
- Closed
-
- links to