[
https://issues.apache.org/jira/browse/IGNITE-14292?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dmitry Pavlov updated IGNITE-14292:
-----------------------------------
Fix Version/s: 2.12
> Change permissions required to create/destroy caches in GridRestProcessor
> -------------------------------------------------------------------------
>
> Key: IGNITE-14292
> URL: https://issues.apache.org/jira/browse/IGNITE-14292
> Project: Ignite
> Issue Type: Improvement
> Components: security
> Affects Versions: 2.9.1
> Reporter: Andrey Kuznetsov
> Assignee: Sergei Ryzhov
> Priority: Major
> Fix For: 2.12
>
> Time Spent: 50m
> Remaining Estimate: 0h
>
> {{GridRestProcessor}} authorizes {{ADMIN_CACHE}} permission before cache
> creation/destruction. This is inconsistent with thin client connector
> behavior and looks counterintuitive. {{ADMIN_CACHE}} should be replaced with
> {{CACHE_CREATE}} and {{CACHE_DESTROY}}.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
