[
https://issues.jboss.org/browse/ISPN-7333?page=com.atlassian.jira.plugin....
]
Vladimir Blagojevic commented on ISPN-7333:
-------------------------------------------
[~NadirX] I was convinced I created a JIRA related to this issue and that assigned it to
you. However, I could not find it anymore. If it is a duplicate please resolve it as a
duplicate. We need this one fixed as ISPN-7264 is related to the root cause described
here.
BULK_READ permission is not set in identity/role
------------------------------------------------
Key: ISPN-7333
URL:
https://issues.jboss.org/browse/ISPN-7333
Project: Infinispan
Issue Type: Bug
Components: Core, Server
Reporter: Vladimir Blagojevic
Assignee: Tristan Tarrant
It appears that BULK_READ permission is nor properly wired/transferred into API
invocations. When attempting to access schema names we get the following exceptions in the
server:
[Server:server-two] 11:51:44,982 ERROR [org.jboss.as.controller.management-operation]
(ServerService Thread Pool -- 33) WFLYCTL0013: Operation
("get-proto-schema-names") failed - address: ([
[Server:server-two] ("subsystem" => "datagrid-infinispan"),
[Server:server-two] ("cache-container" => "clustered")
[Server:server-two] ]) - failure description: "DGISPN0118: Failed to invoke
operation: ISPN000287: Unauthorized access: subject 'Subject with principal(s):
[vladimir@ManagementRealm, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks
'BULK_READ' permission"
However, we have set this permission for the role identity/role making invocations (i.e
vladimir in the example above)
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)