]
Tristan Tarrant commented on ISPN-4451:
---------------------------------------
One thing that has changed since the previous release is that you need to invoke
globalConfiguration.security().authorization().enable() (enablement was previously
implicit).
Missing ACCESS right
--------------------
Key: ISPN-4451
URL:
https://issues.jboss.org/browse/ISPN-4451
Project: Infinispan
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Security
Reporter: Vojtech Juranek
Assignee: Tristan Tarrant
When security is turned on ({{cacheConfig.security().authorization().enable()}}), any
user can obtain/create a cache, even unauthorized users. This should be allowed only for
users with right {{ACCESS}}. This right is actually not present in
{{AuthorizationPermission}}.