Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-11763

Make cache authorization roles declaration implicit

    XMLWordPrintable

Details

    • Enhancement
    • Resolution: Done
    • Major
    • 11.0.0.CR1
    • 11.0.0.Dev05
    • Security
    • None

    Description

      Specifying cache authorization roles is a chore because a user must declare which global roles apply to each individual cache.
      By making the cache roles implicit, we can apply all roles declared in the global config to caches automatically:

      <cache-container>
      <security>
            <authorization>
               <identity-role-mapper/>
               <role name="AdminRole" permissions="ALL"/>
               <role name="ReaderRole" permissions="READ"/>
               <role name="WriterRole" permissions="WRITE"/>
               <role name="SupervisorRole" permissions="READ WRITE EXEC BULK_READ"/>
            </authorization>
         </security>
      
        <distributed-cache name="secure-implicit">
        <security><authorization/></security>
        </distributed-cache>
      
        <distributed-cache name="secure-explicit">
          <security><authorization roles="AdminRole ReaderRole WriterRole SupervisorRole"/></security>
        </distributed-cache>
      </cache-container>
      
      

      Attachments

        Activity

          People

            ttarrant@redhat.com Tristan Tarrant
            ttarrant@redhat.com Tristan Tarrant
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: