[KARAF-3002] RBAC-add a jmx.acl.whitelist so that all ObjectName in this list will bypass the RBAC

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.4.0, 3.0.2, 4.0.0.M3
• Component/s: karaf
• Assignee: Freeman Yue Fang
• Reporter: Freeman Yue Fang
• Created: 26/May/14 07:48
• Updated: 15/Sep/18 05:45
• Resolved: 26/May/14 08:22

Description

for an instance some function need access some specific mbeans without login, so that no credential at all, so that the javax.security.auth.Subject would be null. We should provide a mechanism that some mbean we want can bypass the RBAC