Repository: ignite Updated Branches: refs/heads/master f5120b9b8 -> 02ba707bb
IGNITE-9472 Added permissions check on cluster activation - Fixes #4686. Signed-off-by: Dmitriy Govorukhin <[email protected]> Project: http://git-wip-us.apache.org/repos/asf/ignite/repo Commit: http://git-wip-us.apache.org/repos/asf/ignite/commit/02ba707b Tree: http://git-wip-us.apache.org/repos/asf/ignite/tree/02ba707b Diff: http://git-wip-us.apache.org/repos/asf/ignite/diff/02ba707b Branch: refs/heads/master Commit: 02ba707bb0ea9f230d4b4739af8d842737ed0a8e Parents: f5120b9 Author: ibessonov <[email protected]> Authored: Fri Sep 7 17:48:09 2018 +0300 Committer: Dmitriy Govorukhin <[email protected]> Committed: Fri Sep 7 17:48:09 2018 +0300 ---------------------------------------------------------------------- .../ignite/internal/processors/rest/GridRestProcessor.java | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ignite/blob/02ba707b/modules/core/src/main/java/org/apache/ignite/internal/processors/rest/GridRestProcessor.java ---------------------------------------------------------------------- diff --git a/modules/core/src/main/java/org/apache/ignite/internal/processors/rest/GridRestProcessor.java b/modules/core/src/main/java/org/apache/ignite/internal/processors/rest/GridRestProcessor.java index ccb92df..b6c1310 100644 --- a/modules/core/src/main/java/org/apache/ignite/internal/processors/rest/GridRestProcessor.java +++ b/modules/core/src/main/java/org/apache/ignite/internal/processors/rest/GridRestProcessor.java @@ -888,6 +888,12 @@ public class GridRestProcessor extends GridProcessorAdapter { break; + case CLUSTER_ACTIVE: + case CLUSTER_INACTIVE: + perm = SecurityPermission.ADMIN_OPS; + + break; + case CACHE_METRICS: case CACHE_SIZE: case CACHE_METADATA: @@ -901,8 +907,6 @@ public class GridRestProcessor extends GridProcessorAdapter { case NAME: case LOG: case CLUSTER_CURRENT_STATE: - case CLUSTER_ACTIVE: - case CLUSTER_INACTIVE: case AUTHENTICATE: case ADD_USER: case REMOVE_USER:
