Bug 1010659

Summary: RBAC: Failed to create security context for jmx
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Jakub Cechacek <jcechace>
Component: Web ConsoleAssignee: Heiko Braun <hbraun>
Status: CLOSED CURRENTRELEASE QA Contact: Jakub Cechacek <jcechace>
Severity: urgent Docs Contact: Russell Dickenson <rdickens>
Priority: urgent    
Version: 6.2.0CC: brian.stansberry, hpehl, jkudrnac
Target Milestone: ER3   
Target Release: EAP 6.2.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-12-15 16:22:06 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Jakub Cechacek 2013-09-22 10:25:14 UTC
When accessing Profiles - Core - JMX  the following error is thrown

Failed to create security context for jmx, fallback to temporary read-only context

Unexpected HTTP response: 500

Request
{
    "operation" => "composite",
    "address" => [],
    "steps" => [{
        "address" => [
            ("profile" => "full"),
            ("subsystem" => "jmx")
        ],
        "operation" => "read-resource-description",
        "recursive-depth" => 2,
        "access-control" => "trim-descriptions",
        "operations" => true
    }]
}

Response

Internal Server Error
{
    "outcome" => "failed",
    "result" => {"step-1" => {
        "outcome" => "failed",
        "failure-description" => "JBAS014749: Operation handler failed: null",
        "rolled-back" => true
    }},
    "failure-description" => {"domain-failure-description" => {"JBAS014653: Composite operation failed and was rolled back. Steps that failed:" => {"Operation step-1" => "JBAS014749: Operation handler failed: null"}}},
    "rolled-back" => true
}


I have also checked this against WF master - JMX is inaccessible in WF and "Access Denied" popup is shown to everyone except superuser

Comment 3 Jakub Cechacek 2013-10-01 08:42:12 UTC
Verified 6.2.0.ER3