[
https://issues.apache.org/jira/browse/IGNITE-27196?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18042427#comment-18042427
]
Mikhail Petrov commented on IGNITE-27196:
-----------------------------------------
[~NSAmelchev] Thank you for the review.
> Add authorization of Compute Task Job cancellation
> --------------------------------------------------
>
> Key: IGNITE-27196
> URL: https://issues.apache.org/jira/browse/IGNITE-27196
> Project: Ignite
> Issue Type: Bug
> Reporter: Mikhail Petrov
> Assignee: Mikhail Petrov
> Priority: Major
> Labels: ise
> Time Spent: 50m
> Remaining Estimate: 0h
>
> We need to add authorization to cancel a Compute Task. Compute Tasks can be
> canceled explicitly using
> ComputeTaskFuture#getTaskSession()#getJobSiblings(), but unlike
> ComputeTaskFuture#cancel(), this operation is performed without permission
> checks.
> This also affects the control.sh --kill compute command. Even if the user
> doesn't have the TASK_CANCEL permission, all tasks will be terminated after
> this command is run.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
