ignite-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ilya Lantukh (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (IGNITE-9472) REST API has no permission checks for cluster activation/deactivation
Date Wed, 05 Sep 2018 12:52:00 GMT

    [ https://issues.apache.org/jira/browse/IGNITE-9472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16604357#comment-16604357
] 

Ilya Lantukh commented on IGNITE-9472:
--------------------------------------

[~ibessonov], thanks for contribution!

Please add test for this functionality.
Also, you should run your PR on Ignite TeamCity (https://ci.ignite.apache.org/) before moving
ticket to the "Patch Available" state, even if changes look trivial.

> REST API has no permission checks for cluster activation/deactivation
> ---------------------------------------------------------------------
>
>                 Key: IGNITE-9472
>                 URL: https://issues.apache.org/jira/browse/IGNITE-9472
>             Project: Ignite
>          Issue Type: Bug
>            Reporter: Ivan Bessonov
>            Assignee: Ivan Bessonov
>            Priority: Major
>
> ADMIN_OPS permission should be required for CLUSTER_ACTIVE / CLUSTER_INACTIVE commands.
This has to be done in GridRestProcessor.authorize method.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message