You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@karaf.apache.org by "Freeman Fang (JIRA)" <ji...@apache.org> on 2016/08/17 06:31:21 UTC
[jira] [Work started] (KARAF-4636)
karaf.secured.command.compulsory.roles does not work
[ https://issues.apache.org/jira/browse/KARAF-4636?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Work on KARAF-4636 started by Freeman Fang.
-------------------------------------------
> karaf.secured.command.compulsory.roles does not work
> ----------------------------------------------------
>
> Key: KARAF-4636
> URL: https://issues.apache.org/jira/browse/KARAF-4636
> Project: Karaf
> Issue Type: Bug
> Components: karaf-security
> Affects Versions: 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5
> Reporter: Kevin O'Toole
> Assignee: Freeman Fang
> Priority: Critical
> Fix For: 4.1.0, 4.0.6
>
>
> The karaf.secured.command.compulsory.roles property in system.properties does not work in Karaf [4.0.1, 4.0.5].
> It does work in Karaf [3.0.5, 3.0.7].
> Easy way to test this is modify users.properties with the following:
> {noformat}
> viewer = karaf,_g_:viewergroup
> _g_\:viewergroup = group,viewer
> {noformat}
> And then add {noformat}
> karaf.secured.command.compulsory.roles=admin
> {noformat}
> to system.properties.
> If you log in as viewer, Karaf will allow the execution of commands that do not have ACL defined.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)