DefaultCacheManager.getGlobalComponentRegistry should require ADMIN permission ------------------------------------------------------------------------------ Key: ISPN-9599 URL: https://issues.jboss.org/browse/ISPN-9599 Project: Infinispan Issue Type: Bug Components: Core Affects Versions: 9.3.3.Final, 9.4.0.Final Reporter: Dan Berindei Assignee: Dan Berindei Priority: Major Fix For: 10.0.0.Final, 9.4.17.Final {{DefaultCacheManager.getGlobalComponentRegistry()}} allows invoking any component without additional permission checks, so it needs ADMIN permission. {{DefaultCacheManager.getCacheManagerConfiguration()}} also allows access to some internal components, so it also needs ADMIN permission.