[jira] [Created] (IGNITE-23979) IgniteCache#clearAllAsync operation does not throw exception if its authorization fails

[Mikhail Petrov (Jira)]

Mikhail Petrov created IGNITE-23979:
---------------------------------------

             Summary: IgniteCache#clearAllAsync operation does not throw 
exception if its authorization fails 
                 Key: IGNITE-23979
                 URL: https://issues.apache.org/jira/browse/IGNITE-23979
             Project: Ignite
          Issue Type: Bug
            Reporter: Mikhail Petrov



{code:java}
/*
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements.  See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.apache.ignite.internal.processors.security.cache;

import java.util.Arrays;
import java.util.Collections;
import java.util.List;
import java.util.function.Consumer;
import org.apache.ignite.Ignite;
import org.apache.ignite.IgniteCache;
import 
org.apache.ignite.internal.processors.security.AbstractCacheOperationPermissionCheckTest;
import org.apache.ignite.plugin.security.SecurityException;
import org.apache.ignite.plugin.security.SecurityPermissionSetBuilder;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.junit.runners.JUnit4;

import static org.apache.ignite.plugin.security.SecurityPermission.CACHE_CREATE;
import static org.apache.ignite.plugin.security.SecurityPermission.CACHE_PUT;
import static org.apache.ignite.plugin.security.SecurityPermission.CACHE_READ;
import static org.apache.ignite.plugin.security.SecurityPermission.CACHE_REMOVE;
import static 
org.apache.ignite.plugin.security.SecurityPermission.JOIN_AS_SERVER;
import static 
org.apache.ignite.testframework.GridTestUtils.assertThrowsWithCause;

/**
 * Test CRUD cache permissions.
 */
@RunWith(JUnit4.class)
public class CacheOperationPermissionCheckTest extends 
AbstractCacheOperationPermissionCheckTest {
    /** */
    @Test
    public void testServerNode() throws Exception {
        testCrudCachePermissions(false);
    }

    /** */
    @Test
    public void testClientNode() throws Exception {
        testCrudCachePermissions(true);
    }

    /**
     * @param isClient True if is client mode.
     * @throws Exception If failed.
     */
    private void testCrudCachePermissions(boolean isClient) throws Exception {
        Ignite node = startGrid(loginPrefix(isClient) + "_test_node",
            SecurityPermissionSetBuilder.create()
                .defaultAllowAll(false)
                .appendSystemPermissions(CACHE_CREATE, JOIN_AS_SERVER)
                .appendCachePermissions(CACHE_NAME, CACHE_READ, CACHE_PUT, 
CACHE_REMOVE)
                .appendCachePermissions(FORBIDDEN_CACHE, EMPTY_PERMS).build(), 
isClient);

        for (Consumer<IgniteCache<String, String>> c : operations()) {
            prepareCache(CACHE_NAME);

            c.accept(node.cache(CACHE_NAME));
        }

        prepareCache(FORBIDDEN_CACHE);

        for (Consumer<IgniteCache<String, String>> c : operations())
            assertThrowsWithCause(() -> c.accept(node.cache(FORBIDDEN_CACHE)), 
SecurityException.class);
    }

    /**
     * @return Collection of operations to invoke a cache operation.
     */
    private List<Consumer<IgniteCache<String, String>>> operations() {
        return Arrays.asList(
            c -> c.clearAllAsync(Collections.singleton("key")).get()
        );
    }

    /** */
    private void prepareCache(String cacheName) {
        IgniteCache<Object, Object> cache = grid("server").cache(cacheName);

        cache.clear();
        cache.put("key", "val");
    }
}

{code}

IgniteCache#clearAllAsync operation does not throw exception if its 
authorization fails. The operation is aborted internally, but the user receives 
a successfully completed future.




--
This message was sent by Atlassian Jira
(v8.20.10#820010)