February 2021 - infinispan-issues

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti commented on ISPN-12765: ------------------------------------- Reproduced provided in the PR > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Assignee: Tristan Tarrant > Priority: Blocker > Fix For: 12.1.0.Final > > > When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. > Some uses like *xsiteAdmin.checkSite(site)* can't be used from the REST api without a wrapper that will check the subject in the request -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti updated ISPN-12765: -------------------------------- Status: Open (was: New) > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Assignee: Tristan Tarrant > Priority: Blocker > Fix For: 12.1.0.Final > > > When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. > Some uses like *xsiteAdmin.checkSite(site)* can't be used from the REST api without a wrapper that will check the subject in the request -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti updated ISPN-12765: -------------------------------- Git Pull Request: https://github.com/infinispan/infinispan/pull/9075 Status: Pull Request Sent (was: Open) > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Assignee: Tristan Tarrant > Priority: Blocker > Fix For: 12.1.0.Final > > > When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. > Some uses like *xsiteAdmin.checkSite(site)* can't be used from the REST api without a wrapper that will check the subject in the request -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti updated ISPN-12765: -------------------------------- Fix Version/s: 12.1.0.Final > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Assignee: Tristan Tarrant > Priority: Blocker > Fix For: 12.1.0.Final > > > When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. > Some uses like *xsiteAdmin.checkSite(site)* can't be used from the REST api without a wrapper that will check the subject in the request -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti updated ISPN-12765: -------------------------------- Description: When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. Some uses like *xsiteAdmin.checkSite(site)* can't be used from the REST api without a wrapper that will check the subject in the request was: When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. Some uses like ```xsiteAdmin.checkSite(site)``` can't be used from the REST api without a wrapper that will check the subject in the request > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Priority: Blocker > > When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. > Some uses like *xsiteAdmin.checkSite(site)* can't be used from the REST api without a wrapper that will check the subject in the request -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti reassigned ISPN-12765: ----------------------------------- Assignee: Tristan Tarrant > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Assignee: Tristan Tarrant > Priority: Blocker > > When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. > Some uses like *xsiteAdmin.checkSite(site)* can't be used from the REST api without a wrapper that will check the subject in the request -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti updated ISPN-12765: -------------------------------- Description: When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. Some uses like ```xsiteAdmin.checkSite(site)``` can't be used from the REST api without a wrapper that will check the subject in the request was: When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. Some uses like `xsiteAdmin.checkSite(site)` can't be used from the REST api without a wrapper that will check the subject in the request > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Priority: Blocker > > When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. > Some uses like ```xsiteAdmin.checkSite(site)``` can't be used from the REST api without a wrapper that will check the subject in the request -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti updated ISPN-12765: -------------------------------- Description: When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. Some uses like `xsiteAdmin.checkSite(site)` can't be used from the REST api without a wrapper that will check the subject in the request > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Priority: Blocker > > When the REST api performs operations on XSite, Query and Backups that can be only done for ADMIN users, admin user subject is not correctly handled and is detected as null, so REST endpoints respond with Subject null lacks ADMIN permission. > Some uses like `xsiteAdmin.checkSite(site)` can't be used from the REST api without a wrapper that will check the subject in the request -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authz for ADMIN in XSite, Query and Backups

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti updated ISPN-12765: -------------------------------- Summary: REST API does not correctly handle authz for ADMIN in XSite, Query and Backups (was: REST API does not correctly handle authorization for XSite, Query) > REST API does not correctly handle authz for ADMIN in XSite, Query and Backups > ------------------------------------------------------------------------------ > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Priority: Blocker > -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

[Red Hat JIRA] (ISPN-12765) REST API does not correctly handle authorization for XSite, Query

by Katia Aresti (Jira)

[ https://issues.redhat.com/browse/ISPN-12765?page=com.atlassian.jira.plugi... ] Katia Aresti updated ISPN-12765: -------------------------------- Summary: REST API does not correctly handle authorization for XSite, Query (was: XSite REST API does not correctly handle authorization ) > REST API does not correctly handle authorization for XSite, Query > ----------------------------------------------------------------- > > Key: ISPN-12765 > URL: https://issues.redhat.com/browse/ISPN-12765 > Project: Infinispan > Issue Type: Bug > Components: REST > Affects Versions: 12.0.1.Final > Reporter: Katia Aresti > Priority: Blocker > -- This message was sent by Atlassian Jira (v8.13.1#813001)

3 years, 10 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

infinispan-issues February 2021