[infinispan-issues] [JBoss JIRA] (ISPN-6515) GlobalXSiteAdminOperations fails on secured caches

[Tristan Tarrant (JIRA)]

     [ https://issues.jboss.org/browse/ISPN-6515?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tristan Tarrant resolved ISPN-6515.
-----------------------------------
    Resolution: Done


> GlobalXSiteAdminOperations fails on secured caches
> --------------------------------------------------
>
>                 Key: ISPN-6515
>                 URL: https://issues.jboss.org/browse/ISPN-6515
>             Project: Infinispan
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 8.2.1.Final
>            Reporter: Vojtech Juranek
>            Assignee: Vojtech Juranek
>             Fix For: 9.0.0.Alpha2, 9.0.0.Final
>
>
> On secured caches, {{GlobalXSiteAdminOperations}} fails with
> {noformat}
> ESC[0mESC[31m19:26:37,013 ERROR [org.jboss.as.controller.management-operation] (management-handler-thread - 1) WFLYCTL0013: Operation ("read-attribute") failed - address: ([
>     ("subsystem" => "datagrid-infinispan"),
>     ("cache-container" => "local")
> ]): java.lang.SecurityException: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [admin at ManagementRealm, admin at ManagementRealm, admin, org.jboss.remoting3.security.UserPrincipal at 586034f, InetAddressPrincipal <127.0.0.1/127.0.0.1>, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks 'ADMIN' permission
>         at org.infinispan.security.impl.AuthorizationHelper.checkPermission(AuthorizationHelper.java:86)
>         at org.infinispan.security.impl.AuthorizationManagerImpl.checkPermission(AuthorizationManagerImpl.java:42)
>         at org.infinispan.security.impl.SecureCacheImpl.getComponentRegistry(SecureCacheImpl.java:336)
>         at org.infinispan.xsite.GlobalXSiteAdminOperations.addCacheAdmin(GlobalXSiteAdminOperations.java:40)
>         at org.infinispan.xsite.GlobalXSiteAdminOperations.collectXSiteAdminOperation(GlobalXSiteAdminOperations.java:136)
>         at org.infinispan.xsite.GlobalXSiteAdminOperations.globalStatus(GlobalXSiteAdminOperations.java:89)
>         at org.jboss.as.clustering.infinispan.subsystem.CacheContainerMetricsHandler.filterSitesByStatus(CacheContainerMetricsHandler.java:287)
>         at org.jboss.as.clustering.infinispan.subsystem.CacheContainerMetricsHandler.executeRuntimeStep(CacheContainerMetricsHandler.java:259)
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.4.11#64026)