[
https://issues.apache.org/jira/browse/IGNITE-9472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16604357#comment-16604357
]
Ilya Lantukh commented on IGNITE-9472:
--------------------------------------
[~ibessonov], thanks for contribution!
Please add test for this functionality.
Also, you should run your PR on Ignite TeamCity (https://ci.ignite.apache.org/)
before moving ticket to the "Patch Available" state, even if changes look
trivial.
> REST API has no permission checks for cluster activation/deactivation
> ---------------------------------------------------------------------
>
> Key: IGNITE-9472
> URL: https://issues.apache.org/jira/browse/IGNITE-9472
> Project: Ignite
> Issue Type: Bug
> Reporter: Ivan Bessonov
> Assignee: Ivan Bessonov
> Priority: Major
>
> ADMIN_OPS permission should be required for CLUSTER_ACTIVE / CLUSTER_INACTIVE
> commands. This has to be done in GridRestProcessor.authorize method.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
