You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@karaf.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2016/02/18 20:00:20 UTC
[jira] [Commented] (KARAF-4348) [RBAC] Wildcard PIDs chosen before
more specific ones
[ https://issues.apache.org/jira/browse/KARAF-4348?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15152856#comment-15152856 ]
ASF GitHub Bot commented on KARAF-4348:
---------------------------------------
GitHub user grgrzybek opened a pull request:
https://github.com/apache/karaf/pull/149
[KARAF-4348] Correct ordering of wildcard PID for RBAC
(cherry picked from commit 3e83c1d45a6dc9c4a06ba4efed47e2de2ec36cd2)
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/grgrzybek/karaf KARAF-4348-3.0.x
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/karaf/pull/149.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #149
----
commit be9a382659072a9473de24b91167864a8813810f
Author: Grzegorz Grzybek <gr...@gmail.com>
Date: 2016-02-18T17:28:29Z
[KARAF-4348] Correct ordering of wildcard PID for RBAC
(cherry picked from commit 3e83c1d45a6dc9c4a06ba4efed47e2de2ec36cd2)
----
> [RBAC] Wildcard PIDs chosen before more specific ones
> -----------------------------------------------------
>
> Key: KARAF-4348
> URL: https://issues.apache.org/jira/browse/KARAF-4348
> Project: Karaf
> Issue Type: Bug
> Components: karaf-security
> Affects Versions: 2.4.4, 3.0.6, 4.0.4
> Reporter: Grzegorz Grzybek
> Fix For: 2.x, 4.0.5, 3.0.7
>
>
> Depending on the order of PIDs returned from {{configAdmin.listConfigurations("(service.pid=jmx.acl*)")}}, for MBean {{foo.bar:type=Test}} and PIDs in the following order:
> * {{jmx.acl._.bar.Test}}
> * {{jmx.acl.foo.bar.Test}}
> RBAC is performed against wrong PID (more generic).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)