Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-490 Domain Management Role Based Access Control
  3. WFLY-2089

Error executing composite operation as server group role

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Done
    • Major
    • 8.0.0.Beta1
    • 8.0.0.Alpha4
    • Management
    • None

    Description

      This role

      [domain@localhost:9999 /] /core-service=management/access=authorization/server-group-scoped-role=main-MAINTAINER:read-resource
      {                                          
          "outcome" => "success",
          "result" => {
              "base-role" => "MAINTAINER",
              "server-groups" => ["main-server-group"]
          }
      }
      

      ... executing this operation

      [INFO] {
      [INFO]     "address" => [],
      [INFO]     "operation" => "composite",
      [INFO]     "steps" => [
      [INFO]         {
      [INFO]             "address" => [],
      [INFO]             "operation" => "read-children-resources",
      [INFO]             "child-type" => "deployment"
      [INFO]         },
      [INFO]         {
      [INFO]             "operation" => "read-children-resources",
      [INFO]             "child-type" => "server-group"
      [INFO]         },
      [INFO]         {
      [INFO]             "address" => [
      [INFO]                 ("server-group" => "*"),
      [INFO]                 ("deployment" => "*")
      [INFO]             ],
      [INFO]             "operation" => "read-resource"
      [INFO]         }
      [INFO]     ]
      [INFO] }
      

      ... leads to:

      [Host Controller] 19:37:41,713 FINE  [com.sun.net.httpserver] (HttpManagementService-threads - 2) POST /management HTTP/1.1 [401  Unauthorized] ()
      [Host Controller] 19:37:41,713 FINE  [com.sun.net.httpserver] (HttpManagementService-threads - 1) POST /management HTTP/1.1 [401  Unauthorized] ()
      [Host Controller] 19:37:41,762 FINE  [com.sun.net.httpserver] (HttpManagementService-threads - 2) POST /management HTTP/1.1 [200  OK] ()
      [Host Controller] 19:37:41,766 DEBUG [org.jboss.as.controller.management-operation] (HttpManagementService-threads - 1) JBAS014616: Operation ("resolve") failed - address: ([]) - failure description: "JBAS013456: Unauthorized to execute operation 'resolve' for resource '[]' -- \"JBAS013475: Permission denied\""
      [Host Controller] 19:37:41,767 FINE  [com.sun.net.httpserver] (HttpManagementService-threads - 1) POST /management HTTP/1.1 [500  Internal Server Error] ()
      [Host Controller] 19:37:41,821 FINE  [com.sun.net.httpserver] (HttpManagementService-threads - 1) POST /management HTTP/1.1 [200  OK] ()
      [Host Controller] 19:37:41,852 DEBUG [org.jboss.as.controller.management-operation] (HttpManagementService-threads - 2) JBAS014616: Operation ("composite") failed - address: ([]) - failure description: "JBAS014883: No resource definition is registered for address [
      [Host Controller]     (\"host\" => \"master\"),
      [Host Controller]     (\"server\" => \"server-two\")
      [Host Controller] ]"
      

      Attachments

        Issue Links

          Activity

            People

              bstansbe@redhat.com Brian Stansberry
              rhn-support-hbraun Heiko Braun
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: