[KARAF-4636] karaf.secured.command.compulsory.roles does not work

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5
• Fix Version/s: 4.1.0, 4.0.6
• Component/s: karaf
• Assignee: Freeman Yue Fang
• Reporter: Kevin O'Toole
• Created: 25/Jul/16 21:06
• Updated: 15/Sep/18 05:45
• Resolved: 18/Aug/16 02:56

Description

The karaf.secured.command.compulsory.roles property in system.properties does not work in Karaf [4.0.1, 4.0.5].

It does work in Karaf [3.0.5, 3.0.7].

Easy way to test this is modify users.properties with the following:

viewer = karaf,_g_:viewergroup
_g_\:viewergroup = group,viewer

And then add

karaf.secured.command.compulsory.roles=admin

to system.properties.

If you log in as viewer, Karaf will allow the execution of commands that do not have ACL defined.

Issue Links

• Blocked: KARAF-3823 introduce karaf.secured.command.compulsory.roles system property