Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-7333

BULK_READ permission is not set in identity/role

    XMLWordPrintable

Details

    Description

      It appears that BULK_READ permission is nor properly wired/transferred into API invocations. When attempting to access schema names we get the following exceptions in the server:

      [Server:server-two] 11:51:44,982 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool – 33) WFLYCTL0013: Operation ("get-proto-schema-names") failed - address: ([
      [Server:server-two] ("subsystem" => "datagrid-infinispan"),
      [Server:server-two] ("cache-container" => "clustered")
      [Server:server-two] ]) - failure description: "DGISPN0118: Failed to invoke operation: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [vladimir@ManagementRealm, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks 'BULK_READ' permission"

      However, we have set this permission for the role identity/role making invocations (i.e vladimir in the example above)

      Attachments

        Issue Links

          Activity

            Public project attachment banner

              context keys: [headless, issue, helper, isAsynchronousRequest, project, action, user]
              current Project key: ISPN

              People

                ttarrant@redhat.com Tristan Tarrant
                vblagoje Vladimir Blagojevic (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: