[JBoss JIRA] (ISPN-6210) "* lacks 'READ' permission" while executing scripts over TaskManager with authentication enabled
by Anna Manukyan (JIRA)
[ https://issues.jboss.org/browse/ISPN-6210?page=com.atlassian.jira.plugin.... ]
Anna Manukyan updated ISPN-6210:
--------------------------------
Priority: Blocker (was: Major)
> "* lacks 'READ' permission" while executing scripts over TaskManager with authentication enabled
> ------------------------------------------------------------------------------------------------
>
> Key: ISPN-6210
> URL: https://issues.jboss.org/browse/ISPN-6210
> Project: Infinispan
> Issue Type: Bug
> Components: Tasks
> Reporter: Anna Manukyan
> Assignee: Tristan Tarrant
> Priority: Blocker
>
> When creating an authentication enabled cacheManager/cache and trying to execute a script on it (no matter whether the "role" meta-tag is specified or no), the test throws the following exception:
> {code}
> java.security.PrivilegedActionException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [TestPrincipal [name=pheidippides]]' lacks 'READ' permission
> at org.infinispan.security.Security.doAs(Security.java:145)
> at org.infinispan.scripting.SecureScriptingTaskManagerTest.testTask(SecureScriptingTaskManagerTest.java:111)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:497)
> at org.testng.internal.MethodInvocationHelper.invokeMethod(MethodInvocationHelper.java:84)
> at org.testng.internal.Invoker.invokeMethod(Invoker.java:714)
> at org.testng.internal.Invoker.invokeTestMethod(Invoker.java:901)
> at org.testng.internal.Invoker.invokeTestMethods(Invoker.java:1231)
> at org.testng.internal.TestMethodWorker.invokeTestMethods(TestMethodWorker.java:127)
> at org.testng.internal.TestMethodWorker.run(TestMethodWorker.java:111)
> at org.testng.TestRunner.privateRun(TestRunner.java:767)
> at org.testng.TestRunner.run(TestRunner.java:617)
> at org.testng.SuiteRunner.runTest(SuiteRunner.java:348)
> at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:343)
> at org.testng.SuiteRunner.privateRun(SuiteRunner.java:305)
> at org.testng.SuiteRunner.run(SuiteRunner.java:254)
> at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
> at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
> at org.testng.TestNG.runSuitesSequentially(TestNG.java:1224)
> at org.testng.TestNG.runSuitesLocally(TestNG.java:1149)
> at org.testng.TestNG.run(TestNG.java:1057)
> at org.testng.IDEARemoteTestNG.run(IDEARemoteTestNG.java:72)
> at org.testng.RemoteTestNGStarter.main(RemoteTestNGStarter.java:122)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:497)
> at com.intellij.rt.execution.application.AppMain.main(AppMain.java:144)
> Caused by: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [TestPrincipal [name=pheidippides]]' lacks 'READ' permission
> at org.infinispan.security.impl.AuthorizationHelper.checkPermission(AuthorizationHelper.java:86)
> at org.infinispan.security.impl.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:37)
> at org.infinispan.security.impl.SecureCacheImpl.containsKey(SecureCacheImpl.java:364)
> at org.infinispan.scripting.impl.ScriptingManagerImpl.containsScript(ScriptingManagerImpl.java:137)
> at org.infinispan.scripting.impl.ScriptingTaskEngine.handles(ScriptingTaskEngine.java:48)
> at org.infinispan.tasks.impl.TaskManagerImpl.runTask(TaskManagerImpl.java:74)
> at org.infinispan.scripting.SecureScriptingTaskManagerTest$4.run(SecureScriptingTaskManagerTest.java:115)
> at org.infinispan.scripting.SecureScriptingTaskManagerTest$4.run(SecureScriptingTaskManagerTest.java:111)
> at org.infinispan.security.Security.doAs(Security.java:143)
> ... 29 more
> {code}
> You can find the test here:
> https://github.com/andyuk1986/infinispan/blob/4755853001f1f2dd52ca8dfb787...
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month
[JBoss JIRA] (ISPN-6251) "java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [*]' lacks 'READ' permission" while executing server task over hotrod
by Anna Manukyan (JIRA)
[ https://issues.jboss.org/browse/ISPN-6251?page=com.atlassian.jira.plugin.... ]
Anna Manukyan updated ISPN-6251:
--------------------------------
Priority: Blocker (was: Major)
> "java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [*]' lacks 'READ' permission" while executing server task over hotrod
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: ISPN-6251
> URL: https://issues.jboss.org/browse/ISPN-6251
> Project: Infinispan
> Issue Type: Bug
> Components: Server
> Reporter: Anna Manukyan
> Assignee: Michał Szynkiewicz
> Priority: Blocker
> Attachments: local-secured.xml, LocalAuthServerTaskIT.java, LocalAuthTestServerTask.java
>
>
> When the cache-container is configured with security options and trying to execute a server task over secured cache, the following exception is thrown even though the given user has all permissions:
> {code}
> org.infinispan.client.hotrod.exceptions.HotRodClientException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [SimpleUserPrincipal [name=supervisor], InetAddressPrincipal [address=127.0.0.1/127.0.0.1], supervisor@ApplicationRealm, supervisor@ApplicationRealm, supervisor]' lacks 'READ' permission
> at org.infinispan.client.hotrod.impl.protocol.Codec20.checkForErrorsInResponseStatus(Codec20.java:343)
> at org.infinispan.client.hotrod.impl.protocol.Codec20.readPartialHeader(Codec20.java:132)
> at org.infinispan.client.hotrod.impl.protocol.Codec20.readHeader(Codec20.java:118)
> at org.infinispan.client.hotrod.impl.operations.HotRodOperation.readHeaderAndValidate(HotRodOperation.java:56)
> at org.infinispan.client.hotrod.impl.operations.ExecuteOperation.executeOperation(ExecuteOperation.java:49)
> at org.infinispan.client.hotrod.impl.operations.RetryOnFailureOperation.execute(RetryOnFailureOperation.java:54)
> at org.infinispan.client.hotrod.impl.RemoteCacheImpl.execute(RemoteCacheImpl.java:703)
> at org.infinispan.server.test.task.LocalAuthServerTaskIT.shouldThrowAuthenticationException(LocalAuthServerTaskIT.java:67)
> {code}
> Please find attached the source code.
> This issue may refer to ISPN-6210.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month
[JBoss JIRA] (ISPN-6251) "java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [*]' lacks 'READ' permission" while executing server task over hotrod
by Anna Manukyan (JIRA)
[ https://issues.jboss.org/browse/ISPN-6251?page=com.atlassian.jira.plugin.... ]
Anna Manukyan updated ISPN-6251:
--------------------------------
Attachment: local-secured.xml
LocalAuthTestServerTask.java
LocalAuthServerTaskIT.java
> "java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [*]' lacks 'READ' permission" while executing server task over hotrod
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: ISPN-6251
> URL: https://issues.jboss.org/browse/ISPN-6251
> Project: Infinispan
> Issue Type: Bug
> Components: Server
> Reporter: Anna Manukyan
> Assignee: Michał Szynkiewicz
> Attachments: local-secured.xml, LocalAuthServerTaskIT.java, LocalAuthTestServerTask.java
>
>
> When the cache-container is configured with security options and trying to execute a server task over secured cache, the following exception is thrown even though the given user has all permissions:
> {code}
> org.infinispan.client.hotrod.exceptions.HotRodClientException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [SimpleUserPrincipal [name=supervisor], InetAddressPrincipal [address=127.0.0.1/127.0.0.1], supervisor@ApplicationRealm, supervisor@ApplicationRealm, supervisor]' lacks 'READ' permission
> at org.infinispan.client.hotrod.impl.protocol.Codec20.checkForErrorsInResponseStatus(Codec20.java:343)
> at org.infinispan.client.hotrod.impl.protocol.Codec20.readPartialHeader(Codec20.java:132)
> at org.infinispan.client.hotrod.impl.protocol.Codec20.readHeader(Codec20.java:118)
> at org.infinispan.client.hotrod.impl.operations.HotRodOperation.readHeaderAndValidate(HotRodOperation.java:56)
> at org.infinispan.client.hotrod.impl.operations.ExecuteOperation.executeOperation(ExecuteOperation.java:49)
> at org.infinispan.client.hotrod.impl.operations.RetryOnFailureOperation.execute(RetryOnFailureOperation.java:54)
> at org.infinispan.client.hotrod.impl.RemoteCacheImpl.execute(RemoteCacheImpl.java:703)
> at org.infinispan.server.test.task.LocalAuthServerTaskIT.shouldThrowAuthenticationException(LocalAuthServerTaskIT.java:67)
> {code}
> Please find attached the source code.
> This issue may refer to ISPN-6210.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month
[JBoss JIRA] (ISPN-6251) "java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [*]' lacks 'READ' permission" while executing server task over hotrod
by Anna Manukyan (JIRA)
[ https://issues.jboss.org/browse/ISPN-6251?page=com.atlassian.jira.plugin.... ]
Anna Manukyan reassigned ISPN-6251:
-----------------------------------
Assignee: Michał Szynkiewicz
> "java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [*]' lacks 'READ' permission" while executing server task over hotrod
> ------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: ISPN-6251
> URL: https://issues.jboss.org/browse/ISPN-6251
> Project: Infinispan
> Issue Type: Bug
> Components: Server
> Reporter: Anna Manukyan
> Assignee: Michał Szynkiewicz
> Attachments: local-secured.xml, LocalAuthServerTaskIT.java, LocalAuthTestServerTask.java
>
>
> When the cache-container is configured with security options and trying to execute a server task over secured cache, the following exception is thrown even though the given user has all permissions:
> {code}
> org.infinispan.client.hotrod.exceptions.HotRodClientException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [SimpleUserPrincipal [name=supervisor], InetAddressPrincipal [address=127.0.0.1/127.0.0.1], supervisor@ApplicationRealm, supervisor@ApplicationRealm, supervisor]' lacks 'READ' permission
> at org.infinispan.client.hotrod.impl.protocol.Codec20.checkForErrorsInResponseStatus(Codec20.java:343)
> at org.infinispan.client.hotrod.impl.protocol.Codec20.readPartialHeader(Codec20.java:132)
> at org.infinispan.client.hotrod.impl.protocol.Codec20.readHeader(Codec20.java:118)
> at org.infinispan.client.hotrod.impl.operations.HotRodOperation.readHeaderAndValidate(HotRodOperation.java:56)
> at org.infinispan.client.hotrod.impl.operations.ExecuteOperation.executeOperation(ExecuteOperation.java:49)
> at org.infinispan.client.hotrod.impl.operations.RetryOnFailureOperation.execute(RetryOnFailureOperation.java:54)
> at org.infinispan.client.hotrod.impl.RemoteCacheImpl.execute(RemoteCacheImpl.java:703)
> at org.infinispan.server.test.task.LocalAuthServerTaskIT.shouldThrowAuthenticationException(LocalAuthServerTaskIT.java:67)
> {code}
> Please find attached the source code.
> This issue may refer to ISPN-6210.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month
[JBoss JIRA] (ISPN-6251) "java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [*]' lacks 'READ' permission" while executing server task over hotrod
by Anna Manukyan (JIRA)
Anna Manukyan created ISPN-6251:
-----------------------------------
Summary: "java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [*]' lacks 'READ' permission" while executing server task over hotrod
Key: ISPN-6251
URL: https://issues.jboss.org/browse/ISPN-6251
Project: Infinispan
Issue Type: Bug
Components: Server
Reporter: Anna Manukyan
When the cache-container is configured with security options and trying to execute a server task over secured cache, the following exception is thrown even though the given user has all permissions:
{code}
org.infinispan.client.hotrod.exceptions.HotRodClientException: java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [SimpleUserPrincipal [name=supervisor], InetAddressPrincipal [address=127.0.0.1/127.0.0.1], supervisor@ApplicationRealm, supervisor@ApplicationRealm, supervisor]' lacks 'READ' permission
at org.infinispan.client.hotrod.impl.protocol.Codec20.checkForErrorsInResponseStatus(Codec20.java:343)
at org.infinispan.client.hotrod.impl.protocol.Codec20.readPartialHeader(Codec20.java:132)
at org.infinispan.client.hotrod.impl.protocol.Codec20.readHeader(Codec20.java:118)
at org.infinispan.client.hotrod.impl.operations.HotRodOperation.readHeaderAndValidate(HotRodOperation.java:56)
at org.infinispan.client.hotrod.impl.operations.ExecuteOperation.executeOperation(ExecuteOperation.java:49)
at org.infinispan.client.hotrod.impl.operations.RetryOnFailureOperation.execute(RetryOnFailureOperation.java:54)
at org.infinispan.client.hotrod.impl.RemoteCacheImpl.execute(RemoteCacheImpl.java:703)
at org.infinispan.server.test.task.LocalAuthServerTaskIT.shouldThrowAuthenticationException(LocalAuthServerTaskIT.java:67)
{code}
Please find attached the source code.
This issue may refer to ISPN-6210.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month
[JBoss JIRA] (ISPN-6144) Display error messsages to user
by Vladimir Blagojevic (JIRA)
[ https://issues.jboss.org/browse/ISPN-6144?page=com.atlassian.jira.plugin.... ]
Vladimir Blagojevic commented on ISPN-6144:
-------------------------------------------
Acknowledged. Will do this throughout the codebase. Not only in the case of cache creation. Handing over to development
> Display error messsages to user
> --------------------------------
>
> Key: ISPN-6144
> URL: https://issues.jboss.org/browse/ISPN-6144
> Project: Infinispan
> Issue Type: Bug
> Components: Console
> Reporter: Pedro Zapata
> Assignee: Vladimir Blagojevic
> Priority: Blocker
>
> If you create an invalid configuration (i.e, set some random value in the site property), an exception is thrown in the log but it’s, not reported to the console.
> No feedback about successful, or wrong creation is reported to the user, without looking into the server log.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month
[JBoss JIRA] (ISPN-6144) Display error messsages to user
by Vladimir Blagojevic (JIRA)
[ https://issues.jboss.org/browse/ISPN-6144?page=com.atlassian.jira.plugin.... ]
Vladimir Blagojevic updated ISPN-6144:
--------------------------------------
Status: Open (was: New)
> Display error messsages to user
> --------------------------------
>
> Key: ISPN-6144
> URL: https://issues.jboss.org/browse/ISPN-6144
> Project: Infinispan
> Issue Type: Bug
> Components: Console
> Reporter: Pedro Zapata
> Assignee: Vladimir Blagojevic
> Priority: Blocker
>
> If you create an invalid configuration (i.e, set some random value in the site property), an exception is thrown in the log but it’s, not reported to the console.
> No feedback about successful, or wrong creation is reported to the user, without looking into the server log.
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
10 years, 1 month