[CAUSEWAY-3074] Shiro - Enhanced Wildcard Permissions Don't Work as Expected

• Type: Documentation
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-M7
• Component/s: Security Shiro

Language

Java

• Assignee: Unassigned
• Reporter: Jörg Rade
• Created: 13/Jun/22 08:30
• Updated: 06/May/23 06:49
• Resolved: 06/May/23 06:49

Description

With (shiro.ini):

securityManager.realms = $iniRealm

permissionResolver = org.apache.isis.security.shiro.authorization.IsisPermissionResolver
iniRealm.permissionResolver = $permissionResolver
[...]
guest_role = !knife:Endpoints,\
             !knife:Releases,\
             !knife:Configurations,\
             !knife:RuntimeEnvironments,\
             !knife:Comparisons,\
             !knife:ConfigComparisons,\
             !knife:ReleaseComparisons,\
             !knife:ServiceComparisons,\
             !knife:Diagrams,\
             *

I get

And with a prefix (be it "reg/", "xxx/", or "x/") I get an output that's closer to my expectations:

Nevertheless, my expectation is, that

• RuntimeEnvironments,
• Comparisons, and
• Diagrams
  would be omitted as well.

Issue Links

• is related to: CAUSEWAY-3073 Documentation Fixes & Addons