Mikhail Petrov created IGNITE-19807:
---------------------------------------

             Summary: Deprecate legacy authorization approach through Security 
Context.
                 Key: IGNITE-19807
                 URL: https://issues.apache.org/jira/browse/IGNITE-19807
             Project: Ignite
          Issue Type: Bug
            Reporter: Mikhail Petrov


We currently have several ways to check if a user has permission to perform an 
operation.


1. IgniteSecurity#authorize methods that delegate permission check to security 
plugin.
2. SecurityContext#*OperationAllowed methods. That are currently is used just 
for one check. This approach assumes that granted  permissions set is returned 
during user authentication and remains immutable.

Let's deprecate the second authorization approach and migrate completely to the 
first.
 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to