Details
-
Sub-task
-
Resolution: Done
-
Major
-
8.0.0.Beta1
-
None
Description
No indication that data was filtered when running read-resource against a wildcard address.
[standalone@localhost:9990 /] /core-service=management/security-realm=*:read-resource
{roles=Monitor}{
"outcome" => "success",
"result" => []
}
If you make a non-addressable resource addressable, but still non-readable, you get the same result:
[standalone@localhost:9990 /] /subsystem=security/security-domain=*:read-resource{roles=Monitor}
{
"outcome" => "success",
"result" => []
}
This latter condition is more problematic, as the user has no clue that some security-domains exist but no data was provided, even though the user has the right to know about their existence.
