[infinispan-issues] [JBoss JIRA] (ISPN-6457) Servers should disallow access to internal user caches over the wire when authorization is disabled

[Adrian Nistor (JIRA)]

    [ https://issues.jboss.org/browse/ISPN-6457?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13188904#comment-13188904 ] 

Adrian Nistor commented on ISPN-6457:
-------------------------------------

I think the point of disabling authorization is to allow everything. So why disable access to these caches?

> Servers should disallow access to internal user caches over the wire when authorization is disabled
> ---------------------------------------------------------------------------------------------------
>
>                 Key: ISPN-6457
>                 URL: https://issues.jboss.org/browse/ISPN-6457
>             Project: Infinispan
>          Issue Type: Task
>          Components: Remote Protocols, Server
>            Reporter: Tristan Tarrant
>            Assignee: Tristan Tarrant
>             Fix For: 9.0.0.Final
>
>
> The server protocols currently allow access to internal user caches (such as the script and schema caches) if authorization is disabled. We should instead not allow access.



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)