[KARAF-5527] the karaf.secured.command.compulsory.roles should only affect command ACL rules

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.1.4, 4.2.0.M2
• Assignee: Freeman Yue Fang
• Reporter: Freeman Yue Fang
• Created: 07/Dec/17 07:17
• Updated: 26/Dec/17 09:00
• Resolved: 07/Dec/17 07:24

Description

for the JMX ACL rules, it's hierarchical and hence we can simply add

*=admin

to the root jmx.acl.cfg to enforce all mbean operations without more specific match to be admin role.

Currently enable karaf.secured.command.compulsory.roles also take effect for the JMX ACL rules which prevent the upper hierarchy rules take effect