Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-11763

Make cache authorization roles declaration implicit

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Done
    • Icon: Major Major
    • 11.0.0.Final
    • 11.0.0.Final
    • Security
    • None

      Specifying cache authorization roles is a chore because a user must declare which global roles apply to each individual cache.
      By making the cache roles implicit, we can apply all roles declared in the global config to caches automatically:

      <cache-container>
<security>
      <authorization>
         <identity-role-mapper/>
         <role name="AdminRole" permissions="ALL"/>
         <role name="ReaderRole" permissions="READ"/>
         <role name="WriterRole" permissions="WRITE"/>
         <role name="SupervisorRole" permissions="READ WRITE EXEC BULK_READ"/>
      </authorization>
   </security>

  <distributed-cache name="secure-implicit">
  <security><authorization/></security>
  </distributed-cache>

  <distributed-cache name="secure-explicit">
    <security><authorization roles="AdminRole ReaderRole WriterRole SupervisorRole"/></security>
  </distributed-cache>
</cache-container>

            [ISPN-11763] Make cache authorization roles declaration implicit

            There are no comments yet on this issue.

              ttarrant@redhat.com Tristan Tarrant
              ttarrant@redhat.com Tristan Tarrant
              Archiver:
              rhn-support-adongare Amol Dongare

                Created:
                Updated:
                Resolved:
                Archived: