Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-490 Domain Management Role Based Access Control
  3. WFLY-1844

deep-copy-subject-mode attribute on Security Subsystem is Readable to all roles

XMLWordPrintable

      According to this spreadsheet [1] deep-copy-subject-mode attribute should be available only to Administrator role, instead it is Readable for everyone 

      [standalone@localhost:9990 /] :whoami(verbose=true)
{
    "outcome" => "success",
    "result" => {
        "identity" => {
            "username" => "monitor",
            "realm" => "ManagementRealm"
        },
        "roles" => ["Monitor"]
    }
}
[standalone@localhost:9990 /] /subsystem=security:read-attribute(name=deep-copy-subject-mode)
{
    "outcome" => "success",
    "result" => false
}

      [1] https://docs.google.com/spreadsheet/ccc?key=0Au0knNJrYUJhdFlSSEVpdGJpQnlDOURXYTRYajhaZWc#gid=1

              kkhan1@redhat.com Kabir Khan
              jcechace@redhat.com Jakub Čecháček
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: