Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-8521

RBAC user with Maintainer role is not any more able to create datasource

XMLWordPrintable

    • Hide
      • add user: ./add-user.sh -u 'maintainer' -p 'asd1asd!'
      • start EAP: ./standalone.sh -c standalone-full-ha.xml
      • using CLI run:
        • /core-service=management/access=authorization/role-mapping=Maintainer:add()
        • /core-service=management/access=authorization/role-mapping=Maintainer/include=maintainer:add(name=maintainer, type=user)
        • /core-service=management/access=authorization:write-attribute(name=provider, value=rbac)
        • reload
      • using web console:
        • log in as a maintainer
        • navigate Configuration > Subsystems > Datasources > Non-XA > Add
        • In Create Datasource wizard select Custom > Next > Name: test > JNDI Name: java:/test > Next > Datacted Driver > h2 > Next > Connection URL: jdbc:h2:mem:test;DB_CLOSE_DELAY=-1 > Next > Next > Finish
      • or in CLI (needs to be authorized as a Maintainer: ./jboss-cli.sh -c --no-local-auth -u='maintainer' -p='asd1asd!')
        • data-source add --name=test --enabled=true --jndi-name=java:/test --connection-url=jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE --driver-class=org.h2.Driver --driver-name=h2
      Show
      add user: ./add-user.sh -u 'maintainer' -p 'asd1asd!' start EAP: ./standalone.sh -c standalone-full-ha.xml using CLI run: /core-service=management/access=authorization/role-mapping=Maintainer:add() /core-service=management/access=authorization/role-mapping=Maintainer/include=maintainer:add(name=maintainer, type=user) /core-service=management/access=authorization:write-attribute(name=provider, value=rbac) reload using web console: log in as a maintainer navigate Configuration > Subsystems > Datasources > Non-XA > Add In Create Datasource wizard select Custom > Next > Name: test > JNDI Name: java:/test > Next > Datacted Driver > h2 > Next > Connection URL: jdbc:h2:mem:test;DB_CLOSE_DELAY=-1 > Next > Next > Finish or in CLI (needs to be authorized as a Maintainer: ./jboss-cli.sh -c --no-local-auth -u='maintainer' -p='asd1asd!') data-source add --name=test --enabled=true --jndi-name=java:/test --connection-url=jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE --driver-class=org.h2.Driver --driver-name=h2

      User gets

      Unknown error
      Authentication required.
      

      This is regression compared to EAP 7.0.0.GA.

              bstansbe@redhat.com Brian Stansberry
              pjelinek@redhat.com Pavel Jelinek
              Pavel Jelinek Pavel Jelinek
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: