Bug 1023100
Summary: | End users can call non-published management API operations | ||
---|---|---|---|
Product: | [JBoss] JBoss Enterprise Application Platform 6 | Reporter: | Ladislav Thon <lthon> |
Component: | Domain Management, JMX | Assignee: | Brian Stansberry <brian.stansberry> |
Status: | CLOSED EOL | QA Contact: | Ladislav Thon <lthon> |
Severity: | low | Docs Contact: | |
Priority: | unspecified | ||
Version: | 6.2.0 | CC: | dandread, myarboro |
Target Milestone: | --- | ||
Target Release: | EAP 6.4.0 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2019-08-19 12:48:07 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Ladislav Thon
2013-10-24 15:33:59 UTC
Ladislav Thon <lthon> made a comment on jira WFLY-2379 I'm not asking to publicize it. In fact, I would be entirely satisfied if the non-published operations were only accessible via the native protocol and other management interfaces gave a "not found" response. We can reformulate this issue to say "give me a proper error message, please". Ladislav Thon <lthon> made a comment on jira WFLY-2379 (To make myself entirely clear: what I'm asking for is consistency. I can't see a reason why it's possible to invoke {{:describe}} via the HTTP interface, but not via JMX. Either both should succeed, or both should fail with a _not found_ message.) I changed the title. We won't be exposing these over the other interfaces. This isn't really related to RBAC. |