You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@karaf.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2016/02/18 20:00:20 UTC

[jira] [Commented] (KARAF-4348) [RBAC] Wildcard PIDs chosen before more specific ones

    [ https://issues.apache.org/jira/browse/KARAF-4348?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15152856#comment-15152856 ] 

ASF GitHub Bot commented on KARAF-4348:
---------------------------------------

GitHub user grgrzybek opened a pull request:

    https://github.com/apache/karaf/pull/149

    [KARAF-4348] Correct ordering of wildcard PID for RBAC

    (cherry picked from commit 3e83c1d45a6dc9c4a06ba4efed47e2de2ec36cd2)

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/grgrzybek/karaf KARAF-4348-3.0.x

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/karaf/pull/149.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #149
    
----
commit be9a382659072a9473de24b91167864a8813810f
Author: Grzegorz Grzybek <gr...@gmail.com>
Date:   2016-02-18T17:28:29Z

    [KARAF-4348] Correct ordering of wildcard PID for RBAC
    
    (cherry picked from commit 3e83c1d45a6dc9c4a06ba4efed47e2de2ec36cd2)

----


> [RBAC] Wildcard PIDs chosen before more specific ones
> -----------------------------------------------------
>
>                 Key: KARAF-4348
>                 URL: https://issues.apache.org/jira/browse/KARAF-4348
>             Project: Karaf
>          Issue Type: Bug
>          Components: karaf-security
>    Affects Versions: 2.4.4, 3.0.6, 4.0.4
>            Reporter: Grzegorz Grzybek
>             Fix For: 2.x, 4.0.5, 3.0.7
>
>
> Depending on the order of PIDs returned from {{configAdmin.listConfigurations("(service.pid=jmx.acl*)")}}, for MBean {{foo.bar:type=Test}} and PIDs in the following order:
> * {{jmx.acl._.bar.Test}}
> * {{jmx.acl.foo.bar.Test}}
> RBAC is performed against wrong PID (more generic).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)