Uploaded image for project: 'Infinispan'
  1. Infinispan
  2. ISPN-9599

DefaultCacheManager.getGlobalComponentRegistry should require ADMIN permission

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 10.0.0.Final, 9.4.17.Final
    • 9.3.3.Final, 9.4.0.Final
    • Core
    • None

      DefaultCacheManager.getGlobalComponentRegistry() allows invoking any component without additional permission checks, so it needs ADMIN permission.
      DefaultCacheManager.getCacheManagerConfiguration() also allows access to some internal components, so it also needs ADMIN permission.

              dberinde@redhat.com Dan Berindei (Inactive)
              dberinde@redhat.com Dan Berindei (Inactive)
              Archiver:
              rhn-support-adongare Amol Dongare

                Created:
                Updated:
                Resolved:
                Archived: