Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-8521

RBAC user with Maintainer role is not any more able to create datasource

    Details

    • Steps to Reproduce:
      Hide
      • add user: ./add-user.sh -u 'maintainer' -p 'asd1asd!'
      • start EAP: ./standalone.sh -c standalone-full-ha.xml
      • using CLI run:
        • /core-service=management/access=authorization/role-mapping=Maintainer:add()
        • /core-service=management/access=authorization/role-mapping=Maintainer/include=maintainer:add(name=maintainer, type=user)
        • /core-service=management/access=authorization:write-attribute(name=provider, value=rbac)
        • reload
      • using web console:
        • log in as a maintainer
        • navigate Configuration > Subsystems > Datasources > Non-XA > Add
        • In Create Datasource wizard select Custom > Next > Name: test > JNDI Name: java:/test > Next > Datacted Driver > h2 > Next > Connection URL: jdbc:h2:mem:test;DB_CLOSE_DELAY=-1 > Next > Next > Finish
      • or in CLI (needs to be authorized as a Maintainer: ./jboss-cli.sh -c --no-local-auth -u='maintainer' -p='asd1asd!')
        • data-source add --name=test --enabled=true --jndi-name=java:/test --connection-url=jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE --driver-class=org.h2.Driver --driver-name=h2
      Show
      add user: ./add-user.sh -u 'maintainer' -p 'asd1asd!' start EAP: ./standalone.sh -c standalone-full-ha.xml using CLI run: /core-service=management/access=authorization/role-mapping=Maintainer:add() /core-service=management/access=authorization/role-mapping=Maintainer/include=maintainer:add(name=maintainer, type=user) /core-service=management/access=authorization:write-attribute(name=provider, value=rbac) reload using web console: log in as a maintainer navigate Configuration > Subsystems > Datasources > Non-XA > Add In Create Datasource wizard select Custom > Next > Name: test > JNDI Name: java:/test > Next > Datacted Driver > h2 > Next > Connection URL: jdbc:h2:mem:test;DB_CLOSE_DELAY=-1 > Next > Next > Finish or in CLI (needs to be authorized as a Maintainer: ./jboss-cli.sh -c --no-local-auth -u='maintainer' -p='asd1asd!') data-source add --name=test --enabled=true --jndi-name=java:/test --connection-url=jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE --driver-class=org.h2.Driver --driver-name=h2

      Description

      User gets

      Unknown error
      Authentication required.
      

      This is regression compared to EAP 7.0.0.GA.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  brian.stansberry Brian Stansberry
                  Reporter:
                  pjelinek Pavel Jelinek
                  Tester:
                  Pavel Jelinek
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: