]
Work on ISPN-12716 started by Pedro Ruivo.
------------------------------------------
Hot Rod iteration shouldn't require ADMIN permission
----------------------------------------------------
Key: ISPN-12716
URL:
https://issues.redhat.com/browse/ISPN-12716
Project: Infinispan
Issue Type: Bug
Components: Hot Rod, Security
Affects Versions: 11.0.9.Final, 12.0.0.Final
Reporter: Pedro Ruivo
Assignee: Pedro Ruivo
Priority: Major
Fix For: 12.0.1.Final, 12.1.0.Dev01
When try to iterate over keys/valis via Hot Rod client ({{RemoteCache}}), it fails with
the following error:
{noformat}
org.infinispan.client.hotrod.exceptions.HotRodClientException:
java.lang.SecurityException: ISPN000287: Unauthorized access: subject
'<subject>' lacks 'ADMIN' permission
{noformat}
Debugging the server, it shows that {{DefaultIterationManager.start()}} retrieves the
{{EncoderRegistry}} from {{GlobalComponentRegistry}}, which requires admin permissions.
The retrieval shouldn't ask for admin (in this case).
Original issue, from StackOverflow:
https://stackoverflow.com/questions/66091661/infinispan-11-cannot-retriev...