Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-490 Domain Management Role Based Access Control
  3. WFLY-2112

Test that validate-address and validate-operation do not leak non-addressable addresses

    XMLWordPrintable

Details

    • Sub-task
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Done
    • None
    • 8.0.0.CR1
    • Management
    • None

    Description

      basically those operations check that an address is valid, or that an operation is valid
      14:18
      the operation has an address
      14:18
      So you do :validate-address(value="/some=where")
      14:18
      I made up the syntax for the value thing, it needs a ModelNode
      14:19 bstans_afk
      Ladicek: the CLI uses that behind the scenes
      14:19 kkhan
      So the way it worked until now is that if the address is valid, it returns that it is valid
      14:19
      and if it is not valid it returns that it is not valid
      14:20 Ladicek
      wow, never heard of that
      14:20 kkhan
      however, if /some=where is not addressable for the current user, we want to return that it is invalid
      14:20 Ladicek
      souns sensible to me
      14:20 kkhan
      i.e. to hide the non-addressable addresses

      Attachments

        Activity

          People

            lthon@redhat.com Ladislav Thon
            kkhan1@redhat.com Kabir Khan
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: