Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-490 Domain Management Role Based Access Control
  3. WFLY-2572

OperationContext.readResourceFromRoot throws UnauthorizedException even when the user doesn't have 'address' perms

    Details

    • Type: Sub-task
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: 8.0.0.Beta1
    • Fix Version/s: 8.0.0.CR1
    • Component/s: Management
    • Labels:
      None

      Description

      UnauthorizedException is used when the caller doesn't have read or write perms. When 'address' perms are missing, NoSuchResourceException should be thrown, same as if the resource didn't exist. OperationContext.readResourceFromRoot is not doing this.

      I haven't found any situations in the existing code where this is resulting in leakage of the existence of addresses, but a possible fix for WFLY-2444 shows it happening once the fix is in place.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  brian.stansberry Brian Stansberry
                  Reporter:
                  brian.stansberry Brian Stansberry
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: