[jira] [Closed] (ARTEMIS-3017) ArtemisJMXSecurity bulk canInvoke operation always returns true

["Clebert Suconic (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/ARTEMIS-3017?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Clebert Suconic closed ARTEMIS-3017.
------------------------------------

> ArtemisJMXSecurity bulk canInvoke operation always returns true
> ---------------------------------------------------------------
>
>                 Key: ARTEMIS-3017
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-3017
>             Project: ActiveMQ Artemis
>          Issue Type: Bug
>          Components: JMX, Web Console
>    Affects Versions: 2.16.0
>            Reporter: Tadayoshi Sato
>            Priority: Major
>             Fix For: 2.17.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> Let's send this bulk request to http://localhost:8161/console/jolokia/, eg:
> {code}
> curl -u admin:admin -d @data.json -H "Content-Type: application/json" http://localhost:8161/console/jolokia/ | jq
> {code}
> data.json
> {code:json}
> [
>   {
>     "type": "exec",
>     "mbean": "hawtio:type=security,area=jmx,name=ArtemisJMXSecurity",
>     "operation": "canInvoke(java.lang.String,java.lang.String)",
>     "arguments": [
>       "java.lang:type=Memory",
>       "gc()"
>     ]
>   },
>   {
>     "type": "exec",
>     "mbean": "hawtio:type=security,area=jmx,name=ArtemisJMXSecurity",
>     "operation": "canInvoke(java.util.Map)",
>     "arguments": [
>       {
>         "java.lang:type=Memory": [
>           "gc()"
>         ]
>       }
>     ]
>   }
> ]
> {code}
> Even if the first result gets {{false}}, the seconde one always returns {{true}}.
> It is because {{HawtioSecurityControlImpl#canInvoke(java.util.Map)}} isn't yet really implemented.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)