[
https://issues.apache.org/jira/browse/IGNITE-14292?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17425050#comment-17425050
]
Dmitry Pavlov commented on IGNITE-14292:
----------------------------------------
Folks, what is the fix version for the ticket? Is it 2.12?
> Change permissions required to create/destroy caches in GridRestProcessor
> -------------------------------------------------------------------------
>
> Key: IGNITE-14292
> URL: https://issues.apache.org/jira/browse/IGNITE-14292
> Project: Ignite
> Issue Type: Improvement
> Components: security
> Affects Versions: 2.9.1
> Reporter: Andrey Kuznetsov
> Assignee: Sergei Ryzhov
> Priority: Major
> Time Spent: 50m
> Remaining Estimate: 0h
>
> {{GridRestProcessor}} authorizes {{ADMIN_CACHE}} permission before cache
> creation/destruction. This is inconsistent with thin client connector
> behavior and looks counterintuitive. {{ADMIN_CACHE}} should be replaced with
> {{CACHE_CREATE}} and {{CACHE_DESTROY}}.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
