[JBoss JIRA] (ISPN-7255) Document ___script_manager and ___schema_manager roles
by Roman Macor (JIRA)
[ https://issues.jboss.org/browse/ISPN-7255?page=com.atlassian.jira.plugin.... ]
Roman Macor edited comment on ISPN-7255 at 11/29/16 9:45 AM:
-------------------------------------------------------------
I see that it is in fact documented in http://infinispan.org/docs/9.0.x/user_guide/user_guide.html
Please correct the following mistakes:
Be aware that, when security is enabled, access to the schema cache via the remote protocols requires that the user belongs to the '_schema_manager role'
to
Be aware that, when security is enabled, access to the schema cache via the remote protocols requires that the user belongs to the '___schema_manager' role
Be aware that, when security is enabled, access to the script cache via the remote protocols requires that the user belongs to the _'_script_manager role'.
to
Be aware that, when security is enabled, access to the script cache via the remote protocols requires that the user belongs to the '___script_manager' role.
was (Author: rmacor):
I see that it is in fact documented in http://infinispan.org/docs/9.0.x/user_guide/user_guide.html
Please correct the following mistakes:
Be aware that, when security is enabled, access to the schema cache via the remote protocols requires that the user belongs to the '_schema_manager role'
to
Be aware that, when security is enabled, access to the schema cache via the remote protocols requires that the user belongs to the '__schema_manager' role
Be aware that, when security is enabled, access to the script cache via the remote protocols requires that the user belongs to the _'_script_manager role'.
to
Be aware that, when security is enabled, access to the script cache via the remote protocols requires that the user belongs to the '__script_manager' role.
> Document ___script_manager and ___schema_manager roles
> ------------------------------------------------------
>
> Key: ISPN-7255
> URL: https://issues.jboss.org/browse/ISPN-7255
> Project: Infinispan
> Issue Type: Bug
> Components: Documentation-Query
> Affects Versions: 9.0.0.Alpha4
> Reporter: Roman Macor
>
> A user needs to have these roles to access scripts and schemes (when authorization is enabled), but I couldn't find it in documentation anywhere.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (ISPN-7255) Document ___script_manager and ___schema_manager roles
by Roman Macor (JIRA)
[ https://issues.jboss.org/browse/ISPN-7255?page=com.atlassian.jira.plugin.... ]
Roman Macor commented on ISPN-7255:
-----------------------------------
I see that it is in fact documented in http://infinispan.org/docs/9.0.x/user_guide/user_guide.html
Please correct the following mistakes:
Be aware that, when security is enabled, access to the schema cache via the remote protocols requires that the user belongs to the '_schema_manager role'
to
Be aware that, when security is enabled, access to the schema cache via the remote protocols requires that the user belongs to the '__schema_manager' role
Be aware that, when security is enabled, access to the script cache via the remote protocols requires that the user belongs to the _'_script_manager role'.
to
Be aware that, when security is enabled, access to the script cache via the remote protocols requires that the user belongs to the '__script_manager' role.
> Document ___script_manager and ___schema_manager roles
> ------------------------------------------------------
>
> Key: ISPN-7255
> URL: https://issues.jboss.org/browse/ISPN-7255
> Project: Infinispan
> Issue Type: Bug
> Components: Documentation-Query
> Affects Versions: 9.0.0.Alpha4
> Reporter: Roman Macor
>
> A user needs to have these roles to access scripts and schemes (when authorization is enabled), but I couldn't find it in documentation anywhere.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (ISPN-7246) Memory leak with LIRS eviction strategy
by RH Bugzilla Integration (JIRA)
[ https://issues.jboss.org/browse/ISPN-7246?page=com.atlassian.jira.plugin.... ]
RH Bugzilla Integration updated ISPN-7246:
------------------------------------------
Bugzilla Update: Perform
> Memory leak with LIRS eviction strategy
> ---------------------------------------
>
> Key: ISPN-7246
> URL: https://issues.jboss.org/browse/ISPN-7246
> Project: Infinispan
> Issue Type: Bug
> Components: Core
> Affects Versions: 8.2.5.Final
> Environment: * Infinispan 8.2.5.Final Library mode
> * LIRS eviction strategy
> Reporter: ted won
> Labels: core, eviction, leak, lirs, strategy
> Attachments: reproducer.zip
>
>
> There is a memory leak with the default eviction strategy. It's a leak in org.infinispan.commons.util.concurrent.jdk8backported.BoundedEquivalentConcurrentHashMapV8 with LIRS eviction strategy.
> There are cache entries in org.infinispan.container.DefaultDataContainer.entries and its size are bigger than cache size after eviction occurred.
> DefaultDataContainer.entries retain keys and values for evicted entries in the cache.
> After full GC, DefaultDataContainer.entries size wasn't changed.
> The following minimum reproducer exhibits a leak. Eviction is supposed to suppress OOME.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (ISPN-7255) Document ___script_manager and ___schema_manager roles
by Roman Macor (JIRA)
Roman Macor created ISPN-7255:
---------------------------------
Summary: Document ___script_manager and ___schema_manager roles
Key: ISPN-7255
URL: https://issues.jboss.org/browse/ISPN-7255
Project: Infinispan
Issue Type: Bug
Components: Documentation-Query
Affects Versions: 9.0.0.Alpha4
Reporter: Roman Macor
A user needs to have these roles to access scripts and schemes (when authorization is enabled), but I couldn't find it in documentation anywhere.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (ISPN-7254) Administration console - accesing content without needed permissions should display error meesage
by Roman Macor (JIRA)
Roman Macor created ISPN-7254:
---------------------------------
Summary: Administration console - accesing content without needed permissions should display error meesage
Key: ISPN-7254
URL: https://issues.jboss.org/browse/ISPN-7254
Project: Infinispan
Issue Type: Bug
Components: JMX, reporting and management
Affects Versions: 9.0.0.Alpha4
Reporter: Roman Macor
Assignee: Vladimir Blagojevic
Attachments: standalone-auth.xml
Create user with admin role, but without ___script_manager and ___schema_manager roles
Start the server with security enabled.
e.g. standalone with attached configuration (but the issue is present in domain mode as well)
bin/standalone.sh -c standalone-auth.xml
click on cache container -> configuration
result: the console is stuck with loading icon (it's still responding)
Server log show:
ERROR [org.jboss.as.controller.management-operation] (External Management Request Threads -- 9) WFLYCTL0013: Operation ("get-proto-schema-names") failed - address: ([
"subsystem",
"datagrid-infinispan",
"cache-container",
"local"
]) - failure description: "DGISPN0118: Failed to invoke operation: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [org.jboss.as.core.security.SimplePrincipal@36ebcb, user@ManagementRealm, admin@ManagementRealm, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks 'BULK_READ' permission"
Expected result: there should be an error message in the console informing the user that he doesn't have required permissions.
*Another issue*: User have admin role, so he should be able to access configuration page, he shouldn't be able to access scripts and schemes configuration because he lacks ,___script_manager and ___schema_manager
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (ISPN-7252) "ORA-00942: table or view does not exist" when starting the server with Oracle cache store
by Gustavo Fernandes (JIRA)
[ https://issues.jboss.org/browse/ISPN-7252?page=com.atlassian.jira.plugin.... ]
Gustavo Fernandes updated ISPN-7252:
------------------------------------
Summary: "ORA-00942: table or view does not exist" when starting the server with Oracle cache store (was: "ORA-00942: table or view does not exist" when starting the server)
> "ORA-00942: table or view does not exist" when starting the server with Oracle cache store
> ------------------------------------------------------------------------------------------
>
> Key: ISPN-7252
> URL: https://issues.jboss.org/browse/ISPN-7252
> Project: Infinispan
> Issue Type: Bug
> Components: Loaders and Stores
> Affects Versions: 9.0.0.Alpha4
> Reporter: Gustavo Fernandes
> Assignee: Gustavo Fernandes
>
> Exception thrown during start. The tables are created successfully on Oracle, but during the index check it throws:
> {noformat}
> Caused by: org.infinispan.persistence.spi.PersistenceException: java.sql.SQLSyntaxErrorException: ORA-00942: table or view does not exist
> at org.infinispan.persistence.jdbc.table.management.AbstractTableManager.timestampIndexExists(AbstractTableManager.java:151)
> at org.infinispan.persistence.jdbc.table.management.AbstractTableManager.createTimestampIndex(AbstractTableManager.java:127)
> at org.infinispan.persistence.jdbc.table.management.AbstractTableManager.start(AbstractTableManager.java:61)
> at org.infinispan.persistence.jdbc.common.AbstractJdbcStore.initializeConnectionFactory(AbstractJdbcStore.java:163)
> at org.infinispan.persistence.jdbc.common.AbstractJdbcStore.start(AbstractJdbcStore.java:55)
> at org.infinispan.persistence.jdbc.stringbased.JdbcStringBasedStore.start(JdbcStringBasedStore.java:95)
> at org.infinispan.persistence.manager.PersistenceManagerImpl.lambda$start$0(PersistenceManagerImpl.java:156)
> at java.util.ArrayList.forEach(ArrayList.java:1249)
> at org.infinispan.persistence.manager.PersistenceManagerImpl.start(PersistenceManagerImpl.java:172)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months
[JBoss JIRA] (ISPN-7252) "ORA-00942: table or view does not exist" when starting the server
by Gustavo Fernandes (JIRA)
Gustavo Fernandes created ISPN-7252:
---------------------------------------
Summary: "ORA-00942: table or view does not exist" when starting the server
Key: ISPN-7252
URL: https://issues.jboss.org/browse/ISPN-7252
Project: Infinispan
Issue Type: Bug
Components: Loaders and Stores
Affects Versions: 9.0.0.Alpha4
Reporter: Gustavo Fernandes
Assignee: Gustavo Fernandes
Exception thrown during start. The tables are created successfully on Oracle, but during the index check it throws:
{noformat}
Caused by: org.infinispan.persistence.spi.PersistenceException: java.sql.SQLSyntaxErrorException: ORA-00942: table or view does not exist
at org.infinispan.persistence.jdbc.table.management.AbstractTableManager.timestampIndexExists(AbstractTableManager.java:151)
at org.infinispan.persistence.jdbc.table.management.AbstractTableManager.createTimestampIndex(AbstractTableManager.java:127)
at org.infinispan.persistence.jdbc.table.management.AbstractTableManager.start(AbstractTableManager.java:61)
at org.infinispan.persistence.jdbc.common.AbstractJdbcStore.initializeConnectionFactory(AbstractJdbcStore.java:163)
at org.infinispan.persistence.jdbc.common.AbstractJdbcStore.start(AbstractJdbcStore.java:55)
at org.infinispan.persistence.jdbc.stringbased.JdbcStringBasedStore.start(JdbcStringBasedStore.java:95)
at org.infinispan.persistence.manager.PersistenceManagerImpl.lambda$start$0(PersistenceManagerImpl.java:156)
at java.util.ArrayList.forEach(ArrayList.java:1249)
at org.infinispan.persistence.manager.PersistenceManagerImpl.start(PersistenceManagerImpl.java:172)
{noformat}
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
7 years, 5 months