Bug 1233712

Summary: [QE] Statement that "using HTTPS helps protect availability of EAP 6 instance" needs justification
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Ondrej Lukas <olukas>
Component: DocumentationAssignee: David Michael <dmichael>
Status: CLOSED CURRENTRELEASE QA Contact: Ondrej Kotek <okotek>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.4.0CC: dmichael, eap-docs
Target Milestone: post-GAKeywords: Documentation, EasyFix, Triaged
Target Release: EAP 6.4.2   
Hardware: Unspecified   
OS: Unspecified   
URL: https://access.stage.redhat.com/beta/documentation/en/red-hat-jboss-enterprise-application-platform-64-how-to-configure-server-security
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-10-20 04:47:44 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1233490    

Description Ondrej Lukas 2015-06-19 12:33:18 UTC
Book: How to Configure Server Security
Revision: n_1415843_how-to-configure-server-security_version_6.4_edition_1.0_release_0-revision_1
Section: Configure the Management Console for HTTPS

Issue description:
There is "Anyone administering a JBoss Enterprise Application Platform 6 instance has greater permissions on that instance than non-privileged users, and using HTTPS helps protect the integrity and availability of that instance." It is not obvious from surrounding text, how using HTTPS helps to protect either integrity or availability. The statement needs to be justified or removed.

Suggestions for improvement:
Remove the statement.