[JBoss JIRA] (ISPN-10219) security session doc with wrong declarative configuration
by Gustavo Lira e Silva (Jira)
[ https://issues.jboss.org/browse/ISPN-10219?page=com.atlassian.jira.plugin... ]
Gustavo Lira e Silva resolved ISPN-10219.
-----------------------------------------
Resolution: Done
> security session doc with wrong declarative configuration
> ---------------------------------------------------------
>
> Key: ISPN-10219
> URL: https://issues.jboss.org/browse/ISPN-10219
> Project: Infinispan
> Issue Type: Bug
> Components: Documentation-Core, Security
> Affects Versions: 9.4.13.Final
> Reporter: Gustavo Lira e Silva
> Assignee: Gustavo Lira e Silva
> Priority: Major
>
> Session 23.1.3. Embedded Configuration has some wrong declarative configurations.
> The following declarative configuration has some errors:
> {code:xml}
> <cache-container default-cache="secured">
> <security>
> <authorization enabled="true">
> <identity-role-mapper />
> <role name="admin" permissions="ALL" />
> <role name="reader" permissions="READ" />
> <role name="writer" permissions="WRITE" />
> <role name="supervisor" permissions="READ WRITE EXEC BULK" />
> </authorization>
> </security>
> <local-cache name="secured">
> <security>
> <authorization roles="admin reader writer supervisor" />
> </security>
> </local-cache>
> </cache-container>
> {code}
> # name attribute is mandatory into cache-container
> # 'enabled' isn't an allowed attribute for the 'authorization' element. The 'authorization' element doesn't allow any attributes
> # There's no permission BULK
> The XML should be like this:
> {code:xml}
> <cache-container name="secure" default-cache="secured">
> <security>
> <authorization>
> <identity-role-mapper />
> <role name="admin" permissions="ALL" />
> <role name="reader" permissions="READ" />
> <role name="writer" permissions="WRITE" />
> <role name="supervisor" permissions="READ WRITE EXEC" />
> </authorization>
> </security>
> <local-cache name="secured">
> <security>
> <authorization roles="admin reader writer supervisor" />
> </security>
> </local-cache>
> </cache-container>
> {code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months
[JBoss JIRA] (ISPN-10220) Create named lambdas to identify each test that is running
by Diego Lovison (Jira)
[ https://issues.jboss.org/browse/ISPN-10220?page=com.atlassian.jira.plugin... ]
Diego Lovison reassigned ISPN-10220:
------------------------------------
Assignee: Diego Lovison
> Create named lambdas to identify each test that is running
> ----------------------------------------------------------
>
> Key: ISPN-10220
> URL: https://issues.jboss.org/browse/ISPN-10220
> Project: Infinispan
> Issue Type: Bug
> Reporter: Diego Lovison
> Assignee: Diego Lovison
> Priority: Critical
>
> After ISPN-10148, all lambdas in the index will be the same. It will return only one test in the XML.
> For example:
> {code:java}
> // Put
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> // Functional Command
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> // Put all
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> // Put Async
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> // Compute
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> {code}
> will be reported only once like:
> {code:java}
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([$$Lambda$, false])
> {code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months
[JBoss JIRA] (ISPN-10220) Create named lambdas to identify each test that is running
by Diego Lovison (Jira)
[ https://issues.jboss.org/browse/ISPN-10220?page=com.atlassian.jira.plugin... ]
Diego Lovison updated ISPN-10220:
---------------------------------
Status: Open (was: New)
> Create named lambdas to identify each test that is running
> ----------------------------------------------------------
>
> Key: ISPN-10220
> URL: https://issues.jboss.org/browse/ISPN-10220
> Project: Infinispan
> Issue Type: Bug
> Reporter: Diego Lovison
> Assignee: Diego Lovison
> Priority: Critical
>
> After ISPN-10148, all lambdas in the index will be the same. It will return only one test in the XML.
> For example:
> {code:java}
> // Put
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> // Functional Command
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> // Put all
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> // Put Async
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> // Compute
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
> {code}
> will be reported only once like:
> {code:java}
> org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([$$Lambda$, false])
> {code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months
[JBoss JIRA] (ISPN-10220) Create named lambdas to identify each test that is running
by Diego Lovison (Jira)
Diego Lovison created ISPN-10220:
------------------------------------
Summary: Create named lambdas to identify each test that is running
Key: ISPN-10220
URL: https://issues.jboss.org/browse/ISPN-10220
Project: Infinispan
Issue Type: Bug
Reporter: Diego Lovison
After ISPN-10148, all lambdas in the index will be the same. It will return only one test in the XML.
For example:
{code:java}
// Put
org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
// Functional Command
org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
// Put all
org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
// Put Async
org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
// Compute
org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([org.infinispan.api.APINonTxTest$$Lambda$1688/0x0000000100b08440@79ef4571, false])
{code}
will be reported only once like:
{code:java}
org.infinispan.api.APINonTxTest#testLockedStreamActuallyLocks([$$Lambda$, false])
{code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months
[JBoss JIRA] (ISPN-10219) security session doc with wrong declarative configuration
by Donald Naro (Jira)
[ https://issues.jboss.org/browse/ISPN-10219?page=com.atlassian.jira.plugin... ]
Donald Naro commented on ISPN-10219:
------------------------------------
[~gliraesi] Hey Gustavo, it looks OK to me. I don't have permissions to merge into the upstream repo though.
> security session doc with wrong declarative configuration
> ---------------------------------------------------------
>
> Key: ISPN-10219
> URL: https://issues.jboss.org/browse/ISPN-10219
> Project: Infinispan
> Issue Type: Bug
> Components: Documentation-Core, Security
> Affects Versions: 9.4.13.Final
> Reporter: Gustavo Lira e Silva
> Priority: Major
>
> Session 23.1.3. Embedded Configuration has some wrong declarative configurations.
> The following declarative configuration has some errors:
> {code:xml}
> <cache-container default-cache="secured">
> <security>
> <authorization enabled="true">
> <identity-role-mapper />
> <role name="admin" permissions="ALL" />
> <role name="reader" permissions="READ" />
> <role name="writer" permissions="WRITE" />
> <role name="supervisor" permissions="READ WRITE EXEC BULK" />
> </authorization>
> </security>
> <local-cache name="secured">
> <security>
> <authorization roles="admin reader writer supervisor" />
> </security>
> </local-cache>
> </cache-container>
> {code}
> # name attribute is mandatory into cache-container
> # 'enabled' isn't an allowed attribute for the 'authorization' element. The 'authorization' element doesn't allow any attributes
> # There's no permission BULK
> The XML should be like this:
> {code:xml}
> <cache-container name="secure" default-cache="secured">
> <security>
> <authorization>
> <identity-role-mapper />
> <role name="admin" permissions="ALL" />
> <role name="reader" permissions="READ" />
> <role name="writer" permissions="WRITE" />
> <role name="supervisor" permissions="READ WRITE EXEC" />
> </authorization>
> </security>
> <local-cache name="secured">
> <security>
> <authorization roles="admin reader writer supervisor" />
> </security>
> </local-cache>
> </cache-container>
> {code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months
[JBoss JIRA] (ISPN-10219) security session doc with wrong declarative configuration
by Gustavo Lira e Silva (Jira)
[ https://issues.jboss.org/browse/ISPN-10219?page=com.atlassian.jira.plugin... ]
Gustavo Lira e Silva commented on ISPN-10219:
---------------------------------------------
[~dnaro] Hey Don can you please review my PR to see if everything is ok?
> security session doc with wrong declarative configuration
> ---------------------------------------------------------
>
> Key: ISPN-10219
> URL: https://issues.jboss.org/browse/ISPN-10219
> Project: Infinispan
> Issue Type: Bug
> Components: Documentation-Core, Security
> Affects Versions: 9.4.13.Final
> Reporter: Gustavo Lira e Silva
> Priority: Major
>
> Session 23.1.3. Embedded Configuration has some wrong declarative configurations.
> The following declarative configuration has some errors:
> {code:xml}
> <cache-container default-cache="secured">
> <security>
> <authorization enabled="true">
> <identity-role-mapper />
> <role name="admin" permissions="ALL" />
> <role name="reader" permissions="READ" />
> <role name="writer" permissions="WRITE" />
> <role name="supervisor" permissions="READ WRITE EXEC BULK" />
> </authorization>
> </security>
> <local-cache name="secured">
> <security>
> <authorization roles="admin reader writer supervisor" />
> </security>
> </local-cache>
> </cache-container>
> {code}
> # name attribute is mandatory into cache-container
> # 'enabled' isn't an allowed attribute for the 'authorization' element. The 'authorization' element doesn't allow any attributes
> # There's no permission BULK
> The XML should be like this:
> {code:xml}
> <cache-container name="secure" default-cache="secured">
> <security>
> <authorization>
> <identity-role-mapper />
> <role name="admin" permissions="ALL" />
> <role name="reader" permissions="READ" />
> <role name="writer" permissions="WRITE" />
> <role name="supervisor" permissions="READ WRITE EXEC" />
> </authorization>
> </security>
> <local-cache name="secured">
> <security>
> <authorization roles="admin reader writer supervisor" />
> </security>
> </local-cache>
> </cache-container>
> {code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months
[JBoss JIRA] (ISPN-10219) security session doc with wrong declarative configuration
by Gustavo Lira e Silva (Jira)
[ https://issues.jboss.org/browse/ISPN-10219?page=com.atlassian.jira.plugin... ]
Gustavo Lira e Silva updated ISPN-10219:
----------------------------------------
Git Pull Request: https://github.com/infinispan/infinispan/pull/6947
> security session doc with wrong declarative configuration
> ---------------------------------------------------------
>
> Key: ISPN-10219
> URL: https://issues.jboss.org/browse/ISPN-10219
> Project: Infinispan
> Issue Type: Bug
> Components: Documentation-Core, Security
> Affects Versions: 9.4.13.Final
> Reporter: Gustavo Lira e Silva
> Priority: Major
>
> Session 23.1.3. Embedded Configuration has some wrong declarative configurations.
> The following declarative configuration has some errors:
> {code:xml}
> <cache-container default-cache="secured">
> <security>
> <authorization enabled="true">
> <identity-role-mapper />
> <role name="admin" permissions="ALL" />
> <role name="reader" permissions="READ" />
> <role name="writer" permissions="WRITE" />
> <role name="supervisor" permissions="READ WRITE EXEC BULK" />
> </authorization>
> </security>
> <local-cache name="secured">
> <security>
> <authorization roles="admin reader writer supervisor" />
> </security>
> </local-cache>
> </cache-container>
> {code}
> # name attribute is mandatory into cache-container
> # 'enabled' isn't an allowed attribute for the 'authorization' element. The 'authorization' element doesn't allow any attributes
> # There's no permission BULK
> The XML should be like this:
> {code:xml}
> <cache-container name="secure" default-cache="secured">
> <security>
> <authorization>
> <identity-role-mapper />
> <role name="admin" permissions="ALL" />
> <role name="reader" permissions="READ" />
> <role name="writer" permissions="WRITE" />
> <role name="supervisor" permissions="READ WRITE EXEC" />
> </authorization>
> </security>
> <local-cache name="secured">
> <security>
> <authorization roles="admin reader writer supervisor" />
> </security>
> </local-cache>
> </cache-container>
> {code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months
[JBoss JIRA] (ISPN-10219) security session doc with wrong declarative configuration
by Gustavo Lira e Silva (Jira)
Gustavo Lira e Silva created ISPN-10219:
-------------------------------------------
Summary: security session doc with wrong declarative configuration
Key: ISPN-10219
URL: https://issues.jboss.org/browse/ISPN-10219
Project: Infinispan
Issue Type: Bug
Components: Documentation-Core, Security
Affects Versions: 9.4.13.Final
Reporter: Gustavo Lira e Silva
Session 23.1.3. Embedded Configuration has some wrong declarative configurations.
The following declarative configuration has some errors:
{code:xml}
<cache-container default-cache="secured">
<security>
<authorization enabled="true">
<identity-role-mapper />
<role name="admin" permissions="ALL" />
<role name="reader" permissions="READ" />
<role name="writer" permissions="WRITE" />
<role name="supervisor" permissions="READ WRITE EXEC BULK" />
</authorization>
</security>
<local-cache name="secured">
<security>
<authorization roles="admin reader writer supervisor" />
</security>
</local-cache>
</cache-container>
{code}
# name attribute is mandatory into cache-container
# 'enabled' isn't an allowed attribute for the 'authorization' element. The 'authorization' element doesn't allow any attributes
# There's no permission BULK
The XML should be like this:
{code:xml}
<cache-container name="secure" default-cache="secured">
<security>
<authorization>
<identity-role-mapper />
<role name="admin" permissions="ALL" />
<role name="reader" permissions="READ" />
<role name="writer" permissions="WRITE" />
<role name="supervisor" permissions="READ WRITE EXEC" />
</authorization>
</security>
<local-cache name="secured">
<security>
<authorization roles="admin reader writer supervisor" />
</security>
</local-cache>
</cache-container>
{code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months
[JBoss JIRA] (ISPN-9027) Distinguishing multiple server Store configurations is impossible
by Pedro Ruivo (Jira)
[ https://issues.jboss.org/browse/ISPN-9027?page=com.atlassian.jira.plugin.... ]
Pedro Ruivo updated ISPN-9027:
------------------------------
Status: Resolved (was: Pull Request Sent)
Resolution: Done
> Distinguishing multiple server Store configurations is impossible
> -----------------------------------------------------------------
>
> Key: ISPN-9027
> URL: https://issues.jboss.org/browse/ISPN-9027
> Project: Infinispan
> Issue Type: Bug
> Components: Loaders and Stores, Server
> Affects Versions: 9.2.1.Final
> Reporter: Sebastian Laskawiec
> Assignee: Ryan Emerson
> Priority: Major
> Fix For: 10.0.0.Beta4, 9.4.14.Final
>
> Attachments: clustered.xml
>
>
> h3. Problem description
> One of our users reported that when using two Deployed Cache Stores, their configuration gets overridden and both behaves as if they had the same configuration. Here's an example:
> {code}
> <distributed-cache name="cassandracache1" owners="2" segments="256" mode="SYNC">
> <store name="store1" class="org.infinispan.persistence.cassandra.CassandraStore" preload="true">
> <property name="autoCreateKeyspace">
> true
> </property>
> <property name="keyspace">
> Infinispan
> </property>
> <property name="entryTable">
> InfinispanEntries
> </property>
> <property name="servers">
> 172.17.0.2[9042]
> </property>
> </store>
> </distributed-cache>
> <distributed-cache name="cassandracache2" owners="2" segments="256" mode="SYNC">
> <store name="store2" class="org.infinispan.persistence.cassandra.CassandraStore" preload="true">
> <property name="autoCreateKeyspace">
> true
> </property>
> <property name="keyspace">
> Infinispan
> </property>
> <property name="entryTable">
> InfinispanEntries1
> </property>
> <property name="servers">
> 172.17.0.2[9042]
> </property>
> </store>
> </distributed-cache>
> {code}
> Both caches ({{cassandracache1}} and {{cassandracache2}}) use the same {{entryTable}} which is set to {{InfinispanEntries1}}.
> h3. Investigation
> {{CacheStoreFactory}} implementation were created to fabricate Loader/Writer instance based on parsed configuration (via {{createInstance}} method). This method receives from {{PersistenceManagerImpl}} an instance of an {{AbstractStoreConfiguration}} (here's an example (1)) two times - once per each parsed configuration. The parsing part seems OK but we do not parse Cache Store Name, which makes differentiating both configuration impossible.
> h3. Proposed fix
> * Add {{name}} attribute to {{StoreConfiguration}}.
> * Either add an explicit parameter to {{CacheStoreFactory#createInstance(StoreConfiguration cfg, String cacheStoreName)}} or scan for Cache Store name in both implementations ({{DeployedCacheStoreFactory}} and {{LocalClassLoaderCacheStoreFactory}}.
> {code}
> (1) AbstractStoreConfiguration [attributes=DeployedStoreConfiguration = [fetchPersistentState=false, purgeOnStartup=false, ignoreModifications=false, preload=true, shared=false, transactional=false, maxBatchSize=100, properties={keyspace=Infinispan, connectionPool.poolTimeoutMillis=5, entryTable=InfinispanEntries, connectionPool.idleTimeoutSeconds=120, connectionPool.heartbeatIntervalSeconds=30, autoCreateKeyspace=true, servers=172.17.0.2[9042]}, customStoreClassName=org.infinispan.persistence.cassandra.CassandraStore], async=AsyncStoreConfiguration [attributes=AsyncStoreConfiguration = [enabled=false, modificationQueueSize=1024, threadPoolSize=1]], singletonStore=SingletonStoreConfiguration [attributes=SingletonStoreConfiguration = [enabled=false, push-state-timeout=10000, push-state-when-coordinator=true]]]
> {code}
--
This message was sent by Atlassian Jira
(v7.12.1#712002)
6 years, 10 months