I've just found that https://issues.jboss.org/browse/WFLY-2179 is not ported to EAP. Looking at the commit, I can't see a reason why -- in fact, it fixes a bug in permission enforcement of upload-deployment-* operations. Can we make that happen? Note that the other commits from the same pull request (https://github.com/wildfly/wildfly/pull/5182) are in EAP just fine (well 1 commit of the 2, the other one is not applicable).
Verified with EAP 6.2.0.ER6.