[KARAF-5527] the karaf.secured.command.compulsory.roles should only affect command ACL rules

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.1.4, 4.2.0.M2
• Assignee: Freeman Fang
• Reporter: Freeman Fang
• Created: 07/Dec/17 07:17
• Updated: 26/Dec/17 09:00
• Resolved: 07/Dec/17 07:24

Description

for the JMX ACL rules, it's hierarchical and hence we can simply add

*=admin

to the root jmx.acl.cfg to enforce all mbean operations without more specific match to be admin role.

Currently enable karaf.secured.command.compulsory.roles also take effect for the JMX ACL rules which prevent the upper hierarchy rules take effect