[infinispan-issues] [JBoss JIRA] (ISPN-8929) $local management user cannot manage protobuf schemas

[Alex Furmanski (JIRA)]

Alex Furmanski created ISPN-8929:
------------------------------------

             Summary: $local management user cannot manage protobuf schemas
                 Key: ISPN-8929
                 URL: https://issues.jboss.org/browse/ISPN-8929
             Project: Infinispan
          Issue Type: Bug
          Components: CLI, Security, Server
            Reporter: Alex Furmanski


The $local management user cannot manipulate protostream caches because it lacks the ___schema_manager role.

For example:
{noformat}
[user at myhost jboss-datagrid]$ bin/cli.sh
You are disconnected at the moment. Type 'connect' to connect to the server or 'help' for the list of supported commands.
[disconnected /] connect 192.168.50.11
[standalone at 192.168.50.11:9990 /] container mycontainer
[standalone at 192.168.50.11:9990 cache-container=mycontainer] :get-proto-schema-names
{
    "outcome" => "failed",
    "failure-description" => "DGISPN0118: Failed to invoke operation: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [$local at ManagementRealm, org.jboss.remoting3.security.UserPrincipal at 439455c7, InetAddressPrincipal <192.168.50.11/192.168.50.11>, InetAddressPrincipal <192.168.50.11/192.168.50.11>]' lacks 'BULK_READ' permission",
    "rolled-back" => true
}
{noformat}

This was tested with RH Data Grid 7.1.2.



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)