[infinispan-issues] [JBoss JIRA] (ISPN-7285) Administration console - BULK_READ permission is not set in identity/role

[Ryan Emerson (JIRA)]

Ryan Emerson created ISPN-7285:
----------------------------------

             Summary: Administration console - BULK_READ permission is not set in identity/role
                 Key: ISPN-7285
                 URL: https://issues.jboss.org/browse/ISPN-7285
             Project: Infinispan
          Issue Type: Bug
          Components: Console
            Reporter: Ryan Emerson
            Assignee: Vladimir Blagojevic
             Fix For: 9.0.0.Beta2


It appears that BULK_READ permission is nor properly wired/transferred into API invocations. When attempting to access schema names we get the following exceptions in the server:

[Server:server-two] 11:51:44,982 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool -- 33) WFLYCTL0013: Operation ("get-proto-schema-names") failed - address: ([
[Server:server-two]     ("subsystem" => "datagrid-infinispan"),
[Server:server-two]     ("cache-container" => "clustered")
[Server:server-two] ]) - failure description: "DGISPN0118: Failed to invoke operation: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [vladimir at ManagementRealm, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks 'BULK_READ' permission"

However, we have set this permission for the role identity/role making invocations (i.e vladimir in the example above)





--
This message was sent by Atlassian JIRA
(v7.2.3#72005)