[infinispan-issues] [JBoss JIRA] (ISPN-6515) GlobalXSiteAdminOperations fails on secured caches
Vojtech Juranek (JIRA)
issues at jboss.org
Mon Apr 18 14:48:00 EDT 2016
Vojtech Juranek created ISPN-6515:
-------------------------------------
Summary: GlobalXSiteAdminOperations fails on secured caches
Key: ISPN-6515
URL: https://issues.jboss.org/browse/ISPN-6515
Project: Infinispan
Issue Type: Bug
Components: Security
Affects Versions: 9.0.0.Alpha1
Reporter: Vojtech Juranek
Assignee: Vojtech Juranek
On secured caches, {{GlobalXSiteAdminOperations}} fails with
{noformat}
ESC[0mESC[31m19:26:37,013 ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 1) WFLYCTL0013: Operation ("read-attribute") failed - address: ([
("subsystem" => "datagrid-infinispan"),
("cache-container" => "local")
]): java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [admin at ManagementRealm, admin at ManagementRealm, admin, org.jboss.remoting3.security.UserPrincipal at 586034f, InetAddressPrincipal <127.0.0.1/127.0.0.1>, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks 'ADMIN' permission
at org.infinispan.security.impl.AuthorizationHelper.checkPermission(AuthorizationHelper.java:86)
at org.infinispan.security.impl.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:42)
at org.infinispan.security.impl.SecureCacheImpl.getComponentRegistry(SecureCacheImpl.java:336)
at org.infinispan.xsite.GlobalXSiteAdminOperations.addCacheAdmin(GlobalXSiteAdminOperations.java:40)
at org.infinispan.xsite.GlobalXSiteAdminOperations.collectXSiteAdminOperation(GlobalXSiteAdminOperations.java:136)
at org.infinispan.xsite.GlobalXSiteAdminOperations.globalStatus(GlobalXSiteAdminOperations.java:89)
at org.jboss.as.clustering.infinispan.subsystem.CacheContainerMetricsHandler.filterSitesByStatus(CacheContainerMetricsHandler.java:287)
at org.jboss.as.clustering.infinispan.subsystem.CacheContainerMetricsHandler.executeRuntimeStep(CacheContainerMetricsHandler.java:259)
{noformat}
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)
More information about the infinispan-issues
mailing list