Description of problem:
Configuring security-domain causes JBAS014803 Duplicate resource error

How reproducible: 100%

Steps to Reproduce:
1. Start JBoss EAP  
2. Open http://localhost:9990/console/App.html#security-domains from a browse
3. Add a security domain
4. Click "View" link of the created security domain
5. Add an authentication login module (ex. Code: foo, Flag: required)
6. Add a module option

Actual results:
The module option is added.

Expected results:
"Failed to modify login-modules" [1] was shown in the notification center area.
The module option was not added.

Additional info:
After I went back to Security Domains page then clicked "View" link, I could add a module option. So it seems login module "foo" is registered halfway before I moved to other page.

Module options in Authorization, Mapping and Audit tab also cause same error.


[1]
Failed to modify login-modules

Unexpected HTTP response: 500

Request
{
    "operation" => "composite",
    "address" => [],
    "steps" => [
        {
            "operation" => "add",
            "address" => [
                ("subsystem" => "security"),
                ("security-domain" => "foo"),
                ("authentication" => "classic")
            ]
        },
        {
            "operation" => "write-attribute",
            "address" => [
                ("subsystem" => "security"),
                ("security-domain" => "foo"),
                ("authentication" => "classic")
            ],
            "name" => "login-modules",
            "value" => [{
                "code" => "bar",
                "flag" => "required",
                "module-options" => [("baz" => "hoge")]
            }]
        }
    ]
}

Response

Internal Server Error
{
    "outcome" => "failed",
    "result" => {
        "step-1" => {
            "outcome" => "failed",
            "failure-description" => "JBAS014803: Duplicate resource [
    (\"subsystem\" => \"security\"),
    (\"security-domain\" => \"foo\"),
    (\"authentication\" => \"classic\")
]",
            "rolled-back" => true
        },
        "step-2" => {"outcome" => undefined}
    },
    "failure-description" => {"JBAS014653: Composite operation failed and was rolled back. Steps that failed:" => {"Operation step-1" => "JBAS014803: Duplicate resource [
    (\"subsystem\" => \"security\"),
    (\"security-domain\" => \"foo\"),
    (\"authentication\" => \"classic\")
]"}},
    "rolled-back" => true,
    "response-headers" => {"process-state" => "reload-required"}
}