jbossas/jboss-as — pull request #3603 by bstansberry (2012-12-08 15:15:06+00:00)
Title: AS7-6085 SecurityManager permissions for core management layer access

PLEASE DON'T MERGE UNTIL I DISCUSS WITH DARRAN, JASON AND DAVI.

Adds ModelControllerPermission to restrict access to a process' ModelController.

Adds ManagementResourceRegistrationPermission to restrict ability to read/write the definitions of resources. The effective use of this would be to block out unknown Extensions by preventing them from registering subsystems.

A valid ManagementResourceRegistrationPermission is required to allow code to register OperationStepHandlers, so to keep things simple I treat OSHs as trusted, and haven't added other permissions related to details of operation execution (e.g. stuff that OperationContext would enforce.)