]
Tristan Tarrant updated ISPN-8736:
----------------------------------
Sprint: DataGrid Sprint #30
REST endpoint authorization
---------------------------
Key: ISPN-8736
URL:
https://issues.jboss.org/browse/ISPN-8736
Project: Infinispan
Issue Type: Enhancement
Components: REST, Security, Server
Reporter: Tristan Tarrant
Assignee: Tristan Tarrant
Priority: Major
The REST endpoint does not use the authenticated user to access authz caches. We need
to:
- integrate with the ServerAuthenticationProvider as used by the Hot Rod endpoint so that
we can use security callbacks and retrieve a fully populated subject (including groups).
This should ultimately connect with Elytron.
- add SecurityActions within the rest code
- Return 403 forbidden where needed