[infinispan-issues] [JBoss JIRA] (ISPN-7264) Administration console - BULK_READ permission is not set in identity/role

[Ryan Emerson (JIRA)]

     [ https://issues.jboss.org/browse/ISPN-7264?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ryan Emerson updated ISPN-7264:
-------------------------------
    Fix Version/s: 9.0.0.Beta2


> Administration console - BULK_READ permission is not set in identity/role
> -------------------------------------------------------------------------
>
>                 Key: ISPN-7264
>                 URL: https://issues.jboss.org/browse/ISPN-7264
>             Project: Infinispan
>          Issue Type: Bug
>          Components: Console
>            Reporter: Vladimir Blagojevic
>            Assignee: Vladimir Blagojevic
>             Fix For: 9.0.0.Beta2
>
>
> It appears that BULK_READ permission is nor properly wired/transferred into API invocations. When attempting to access schema names we get the following exceptions in the server:
> [Server:server-two] 11:51:44,982 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 33) WFLYCTL0013: Operation ("get-proto-schema-names") failed - address: ([
> [Server:server-two]     ("subsystem" => "datagrid-infinispan"),
> [Server:server-two]     ("cache-container" => "clustered")
> [Server:server-two] ]) - failure description: "DGISPN0118: Failed to invoke operation: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [vladimir at ManagementRealm, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks 'BULK_READ' permission"
> However, we have set this permission for the role identity/role making invocations (i.e vladimir in the example above)



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)