[Red Hat JIRA] (ISPN-12716) Hot Rod iteration shouldn't require ADMIN permission
by Pedro Ruivo (Jira)
[ https://issues.redhat.com/browse/ISPN-12716?page=com.atlassian.jira.plugi... ]
Work on ISPN-12716 started by Pedro Ruivo.
------------------------------------------
> Hot Rod iteration shouldn't require ADMIN permission
> ----------------------------------------------------
>
> Key: ISPN-12716
> URL: https://issues.redhat.com/browse/ISPN-12716
> Project: Infinispan
> Issue Type: Bug
> Components: Hot Rod, Security
> Affects Versions: 11.0.9.Final, 12.0.0.Final
> Reporter: Pedro Ruivo
> Assignee: Pedro Ruivo
> Priority: Major
> Fix For: 12.0.1.Final, 12.1.0.Dev01
>
>
> When try to iterate over keys/valis via Hot Rod client ({{RemoteCache}}), it fails with the following error:
> {noformat}
> org.infinispan.client.hotrod.exceptions.HotRodClientException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject '<subject>' lacks 'ADMIN' permission
> {noformat}
> Debugging the server, it shows that {{DefaultIterationManager.start()}} retrieves the {{EncoderRegistry}} from {{GlobalComponentRegistry}}, which requires admin permissions. The retrieval shouldn't ask for admin (in this case).
> Original issue, from StackOverflow: https://stackoverflow.com/questions/66091661/infinispan-11-cannot-retriev...
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
3 years, 10 months
[Red Hat JIRA] (ISPN-12716) Hot Rod iteration shouldn't require ADMIN permission
by Pedro Ruivo (Jira)
[ https://issues.redhat.com/browse/ISPN-12716?page=com.atlassian.jira.plugi... ]
Pedro Ruivo updated ISPN-12716:
-------------------------------
Status: Open (was: New)
> Hot Rod iteration shouldn't require ADMIN permission
> ----------------------------------------------------
>
> Key: ISPN-12716
> URL: https://issues.redhat.com/browse/ISPN-12716
> Project: Infinispan
> Issue Type: Bug
> Components: Hot Rod, Security
> Affects Versions: 11.0.9.Final, 12.0.0.Final
> Reporter: Pedro Ruivo
> Assignee: Pedro Ruivo
> Priority: Major
> Fix For: 12.0.1.Final, 12.1.0.Dev01
>
>
> When try to iterate over keys/valis via Hot Rod client ({{RemoteCache}}), it fails with the following error:
> {noformat}
> org.infinispan.client.hotrod.exceptions.HotRodClientException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject '<subject>' lacks 'ADMIN' permission
> {noformat}
> Debugging the server, it shows that {{DefaultIterationManager.start()}} retrieves the {{EncoderRegistry}} from {{GlobalComponentRegistry}}, which requires admin permissions. The retrieval shouldn't ask for admin (in this case).
> Original issue, from StackOverflow: https://stackoverflow.com/questions/66091661/infinispan-11-cannot-retriev...
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
3 years, 10 months
[Red Hat JIRA] (ISPN-12715) Conflict resolution failure logged at debug level
by Dan Berindei (Jira)
[ https://issues.redhat.com/browse/ISPN-12715?page=com.atlassian.jira.plugi... ]
Dan Berindei updated ISPN-12715:
--------------------------------
Status: Open (was: New)
> Conflict resolution failure logged at debug level
> -------------------------------------------------
>
> Key: ISPN-12715
> URL: https://issues.redhat.com/browse/ISPN-12715
> Project: Infinispan
> Issue Type: Bug
> Components: Core
> Affects Versions: 11.0.9.Final, 12.0.0.Final
> Reporter: Dan Berindei
> Assignee: Dan Berindei
> Priority: Major
> Fix For: 12.1.0.Final, 11.0.10.Final
>
>
> When conflict resolution fails, an ambiguous error message is logged, and the details are only logged at the debug level:
> {noformat}
> 13:11:27,305+0100 ERROR [org.infinispan.conflict.impl.DefaultConflictManager] (non-blocking-thread--p2-t1) Cache org.infinispan.AdvancedCache encountered exception whilst trying to resolve conflicts on merge: java.util.concurrent.CompletionException: java.lang.IllegalArgumentException: Cannot create a transactional context without a valid Transaction instance.
> 13:11:27,307+0100 DEBUG [org.infinispan.CLUSTER] (non-blocking-thread--p2-t1) ISPN000524: Conflict resolution failed for cache C with topology CacheTopology{id=50, phase=CONFLICT_RESOLUTION, rebalanceId=15, currentCH=DefaultConsistentHash{ns=256, owners = (3)[D-32271: 128+128, C-48322: 64+64, A-7433: 64+64]}, pendingCH=null, unionCH=null, actualMembers=[D-32271, C-48322, A-7433], persistentUUIDs=[00355068-c9b0-465f-9be8-3bb214f7af74, 8a353c3d-8d9f-41b4-a3ae-81cb15336e0a, 07936251-a5c8-480b-ad24-fa6b804c60c5]}: java.lang.IllegalArgumentException: Cannot create a transactional context without a valid Transaction instance.
> at org.infinispan.context.impl.TransactionalInvocationContextFactory.createInvocationContext(TransactionalInvocationContextFactory.java:63) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.cache.impl.InvocationHelper.createInvocationContextWithImplicitTransaction(InvocationHelper.java:174) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.cache.impl.InvocationHelper.lambda$new$0(InvocationHelper.java:47) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.cache.impl.DecoratedCache.writeContext(DecoratedCache.java:740) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.cache.impl.InvocationHelper.invokeAsync(InvocationHelper.java:129) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.cache.impl.CacheImpl.putAsync(CacheImpl.java:1398) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.cache.impl.DecoratedCache.putAsync(DecoratedCache.java:683) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.cache.impl.AbstractDelegatingAdvancedCache.putAsync(AbstractDelegatingAdvancedCache.java:338) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.cache.impl.EncoderCache.putAsync(EncoderCache.java:456) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.conflict.impl.DefaultConflictManager.lambda$doResolveConflicts$7(DefaultConflictManager.java:324) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:183) [rt.jar:1.8.0_275]
> at java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:175) [rt.jar:1.8.0_275]
> at org.infinispan.conflict.impl.DefaultConflictManager$ReplicaSpliterator.tryAdvance(DefaultConflictManager.java:498) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at java.util.Spliterator.forEachRemaining(Spliterator.java:326) [rt.jar:1.8.0_275]
> at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:482) [rt.jar:1.8.0_275]
> at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:472) [rt.jar:1.8.0_275]
> at java.util.stream.ForEachOps$ForEachOp.evaluateSequential(ForEachOps.java:150) [rt.jar:1.8.0_275]
> at java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateSequential(ForEachOps.java:173) [rt.jar:1.8.0_275]
> at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) [rt.jar:1.8.0_275]
> at java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:485) [rt.jar:1.8.0_275]
> at org.infinispan.conflict.impl.DefaultConflictManager.doResolveConflicts(DefaultConflictManager.java:282) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> at org.infinispan.conflict.impl.DefaultConflictManager.lambda$resolveConflicts$1(DefaultConflictManager.java:249) [infinispan-core-11.0.9.Final-redhat-00001.jar:11.0.9.Final-redhat-00001]
> {noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
3 years, 10 months
[Red Hat JIRA] (ISPN-12717) DefaultConflictManager.getAllVersions fails in transactional caches
by Dan Berindei (Jira)
[ https://issues.redhat.com/browse/ISPN-12717?page=com.atlassian.jira.plugi... ]
Dan Berindei updated ISPN-12717:
--------------------------------
Status: Open (was: New)
> DefaultConflictManager.getAllVersions fails in transactional caches
> -------------------------------------------------------------------
>
> Key: ISPN-12717
> URL: https://issues.redhat.com/browse/ISPN-12717
> Project: Infinispan
> Issue Type: Bug
> Components: Core
> Affects Versions: 12.0.0.Final
> Reporter: Dan Berindei
> Assignee: Dan Berindei
> Priority: Major
> Fix For: 12.1.0.Final
>
>
> {noformat}
> java.lang.ClassCastException: class org.infinispan.container.entries.VersionedRepeatableReadEntry cannot be cast to class org.infinispan.container.entries.InternalCacheEntry (org.infinispan.container.entries.VersionedRepeatableReadEntry and org.infinispan.container.entries.InternalCacheEntry are in unnamed module of loader 'app')
> at org.infinispan.conflict.impl.DefaultConflictManager$VersionRequest.start(DefaultConflictManager.java:393)
> at org.infinispan.conflict.impl.DefaultConflictManager$VersionRequest.<init>(DefaultConflictManager.java:365)
> at org.infinispan.conflict.impl.DefaultConflictManager.lambda$getAllVersions$0(DefaultConflictManager.java:174)
> at java.base/java.util.HashMap.computeIfAbsent(HashMap.java:1224)
> at org.infinispan.conflict.impl.DefaultConflictManager.getAllVersions(DefaultConflictManager.java:174)
> at org.infinispan.conflict.impl.ConflictManagerTest.getAllVersions(ConflictManagerTest.java:270)
> at org.infinispan.conflict.impl.ConflictManagerTest.compareCacheValuesForKey(ConflictManagerTest.java:222)
> at org.infinispan.conflict.impl.ConflictManagerTest.testAllVersionsOfKeyReturned(ConflictManagerTest.java:134)
> {noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
3 years, 10 months
[Red Hat JIRA] (ISPN-12717) DefaultConflictManager.getAllVersions fails in transactional caches
by Dan Berindei (Jira)
Dan Berindei created ISPN-12717:
-----------------------------------
Summary: DefaultConflictManager.getAllVersions fails in transactional caches
Key: ISPN-12717
URL: https://issues.redhat.com/browse/ISPN-12717
Project: Infinispan
Issue Type: Bug
Components: Core
Affects Versions: 12.0.0.Final
Reporter: Dan Berindei
Assignee: Dan Berindei
Fix For: 12.1.0.Final
{noformat}
java.lang.ClassCastException: class org.infinispan.container.entries.VersionedRepeatableReadEntry cannot be cast to class org.infinispan.container.entries.InternalCacheEntry (org.infinispan.container.entries.VersionedRepeatableReadEntry and org.infinispan.container.entries.InternalCacheEntry are in unnamed module of loader 'app')
at org.infinispan.conflict.impl.DefaultConflictManager$VersionRequest.start(DefaultConflictManager.java:393)
at org.infinispan.conflict.impl.DefaultConflictManager$VersionRequest.<init>(DefaultConflictManager.java:365)
at org.infinispan.conflict.impl.DefaultConflictManager.lambda$getAllVersions$0(DefaultConflictManager.java:174)
at java.base/java.util.HashMap.computeIfAbsent(HashMap.java:1224)
at org.infinispan.conflict.impl.DefaultConflictManager.getAllVersions(DefaultConflictManager.java:174)
at org.infinispan.conflict.impl.ConflictManagerTest.getAllVersions(ConflictManagerTest.java:270)
at org.infinispan.conflict.impl.ConflictManagerTest.compareCacheValuesForKey(ConflictManagerTest.java:222)
at org.infinispan.conflict.impl.ConflictManagerTest.testAllVersionsOfKeyReturned(ConflictManagerTest.java:134)
{noformat}
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
3 years, 10 months
[Red Hat JIRA] (ISPN-12716) Hot Rod iteration shouldn't require ADMIN permission
by Pedro Ruivo (Jira)
Pedro Ruivo created ISPN-12716:
----------------------------------
Summary: Hot Rod iteration shouldn't require ADMIN permission
Key: ISPN-12716
URL: https://issues.redhat.com/browse/ISPN-12716
Project: Infinispan
Issue Type: Bug
Components: Hot Rod, Security
Affects Versions: 12.0.0.Final, 11.0.9.Final
Reporter: Pedro Ruivo
Assignee: Pedro Ruivo
Fix For: 12.0.1.Final, 12.1.0.Dev01
When try to iterate over keys/valis via Hot Rod client ({{RemoteCache}}), it fails with the following error:
{noformat}
org.infinispan.client.hotrod.exceptions.HotRodClientException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject '<subject>' lacks 'ADMIN' permission
{noformat}
Debugging the server, it shows that {{DefaultIterationManager.start()}} retrieves the {{EncoderRegistry}} from {{GlobalComponentRegistry}}, which requires admin permissions. The retrieval shouldn't ask for admin (in this case).
Original issue, from StackOverflow: https://stackoverflow.com/questions/66091661/infinispan-11-cannot-retriev...
--
This message was sent by Atlassian Jira
(v8.13.1#813001)
3 years, 10 months