]
Tristan Tarrant resolved ISPN-6515.
-----------------------------------
Resolution: Done
GlobalXSiteAdminOperations fails on secured caches
--------------------------------------------------
Key: ISPN-6515
URL:
https://issues.jboss.org/browse/ISPN-6515
Project: Infinispan
Issue Type: Bug
Components: Security
Affects Versions: 8.2.1.Final
Reporter: Vojtech Juranek
Assignee: Vojtech Juranek
Fix For: 9.0.0.Alpha2, 9.0.0.Final
On secured caches, {{GlobalXSiteAdminOperations}} fails with
{noformat}
ESC[0mESC[31m19:26:37,013 ERROR [org.jboss.as.controller.management-operation]
(management-handler-thread - 1) WFLYCTL0013: Operation ("read-attribute") failed
- address: ([
("subsystem" => "datagrid-infinispan"),
("cache-container" => "local")
]): java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject
with principal(s): [admin@ManagementRealm, admin@ManagementRealm, admin,
org.jboss.remoting3.security.UserPrincipal@586034f, InetAddressPrincipal
<127.0.0.1/127.0.0.1>, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks
'ADMIN' permission
at
org.infinispan.security.impl.AuthorizationHelper.checkPermission(AuthorizationHelper.java:86)
at
org.infinispan.security.impl.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:42)
at
org.infinispan.security.impl.SecureCacheImpl.getComponentRegistry(SecureCacheImpl.java:336)
at
org.infinispan.xsite.GlobalXSiteAdminOperations.addCacheAdmin(GlobalXSiteAdminOperations.java:40)
at
org.infinispan.xsite.GlobalXSiteAdminOperations.collectXSiteAdminOperation(GlobalXSiteAdminOperations.java:136)
at
org.infinispan.xsite.GlobalXSiteAdminOperations.globalStatus(GlobalXSiteAdminOperations.java:89)
at
org.jboss.as.clustering.infinispan.subsystem.CacheContainerMetricsHandler.filterSitesByStatus(CacheContainerMetricsHandler.java:287)
at
org.jboss.as.clustering.infinispan.subsystem.CacheContainerMetricsHandler.executeRuntimeStep(CacheContainerMetricsHandler.java:259)
{noformat}