Uploaded image for project: 'Red Hat Data Grid'
  1. Red Hat Data Grid
  2. JDG-651

Administration console - BULK_READ permission is not set in identity/role

XMLWordPrintable

    • -
    • Hide

      Add security to a container, set up an appropriate role with permissions, restart server and finally go to cache container configuration page. You should get an error modal dialog

      Show
      Add security to a container, set up an appropriate role with permissions, restart server and finally go to cache container configuration page. You should get an error modal dialog
    • JDG Sprint #19, JDG Sprint #26, JDG Sprint #28

      It appears that BULK_READ permission is nor properly wired/transferred into API invocations. When attempting to access schema names we get the following exceptions in the server:

      [Server:server-two] 11:51:44,982 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool – 33) WFLYCTL0013: Operation ("get-proto-schema-names") failed - address: ([
      [Server:server-two] ("subsystem" => "datagrid-infinispan"),
      [Server:server-two] ("cache-container" => "clustered")
      [Server:server-two] ]) - failure description: "DGISPN0118: Failed to invoke operation: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [vladimir@ManagementRealm, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks 'BULK_READ' permission"

      However, we have set this permission for the role identity/role making invocations (i.e vladimir in the example above)

              remerson@redhat.com Ryan Emerson
              remerson@redhat.com Ryan Emerson
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: