-
Bug
-
Resolution: Done
-
Major
-
None
-
None
Although the operation permissions for add() are given, a host scoped fails to create a new JVM on a specific the role is scoped to:
[domain@localhost:9990 /] /core-service=management/access=authorization/host-scoped-role=stage_hosts:read-resource { "outcome" => "success", "result" => { "base-role" => "maintainer", "hosts" => ["slave"] } } [domain@localhost:9990 /] /host=slave/jvm=small:add(){roles=STAGE_HOSTS} { "outcome" => "failed", "result" => undefined, "failure-description" => {"host-failure-descriptions" => [("slave" => "JBAS013456: Unauthorized to execute operation 'add' for resource '[ (\"host\" => \"slave\"), (\"jvm\" => \"small\") ]' -- \"Permission denied\"")]}, "rolled-back" => true }