[
https://issues.apache.org/jira/browse/IGNITE-9472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16607207#comment-16607207
]
Dmitriy Govorukhin commented on IGNITE-9472:
--------------------------------------------
[~ibessonov] Thanks for the contribution, merged to master.
> REST API has no permission checks for cluster activation/deactivation
> ---------------------------------------------------------------------
>
> Key: IGNITE-9472
> URL: https://issues.apache.org/jira/browse/IGNITE-9472
> Project: Ignite
> Issue Type: Bug
> Reporter: Ivan Bessonov
> Assignee: Ivan Bessonov
> Priority: Major
> Fix For: 2.7
>
>
> ADMIN_OPS permission should be required for CLUSTER_ACTIVE / CLUSTER_INACTIVE
> commands. This has to be done in GridRestProcessor.authorize method.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
