Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-13433

Hotrod STATS operation hangs if called without `MONITOR` permission

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • 13.0.1.Final
    • Server
    • None

    Description

      The server doesn't reply when a client requests a STAT operator without the required `MONITOR` permission.

       

      Server should reply with an hotrod error status/error saying something about the missing permission.

       

      Server Logs show that the server received the request and correctly detected that the client doesn't have the required permission:

       

      {{Thread Thread[blocking-thread--p3-t1,5,ISPN-blocking-thread-group] threw an uncaught exception java.lang.SecurityException: ISPN
      000287: Unauthorized access: subject 'Subject with principal(s): [reader, RolePrincipal{name='reader'}, InetAddressPrincipal [address=127.0.0.1/127.0.0.1]]' lacks 'MONITOR' permission}}

       but the response is not sent back to the client.

      Can be reproduced with Java and C# client

      Attachments

        Activity

          People

            Unassigned Unassigned
            vrigamon@redhat.com Vittorio Rigamonti
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: