[ https://issues.apache.org/jira/browse/IGNITE-12220?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Anton Vinogradov updated IGNITE-12220: -------------------------------------- Comment: was deleted (was: {panel:title=Branch: [pull/6904/head] Base: [master] : Possible Blockers (3)|borderStyle=dashed|borderColor=#ccc|titleBGColor=#F7D6C1} {color:#d04437}ZooKeeper (Discovery) 3{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=4793573]] * ZookeeperDiscoverySpiTestSuite3: CacheContinuousQueryOperationP2PTest.testTxClient - Test has low fail rate in base branch 0,0% and is not flaky {color:#d04437}ZooKeeper (Discovery) 1{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=4793518]] * ZookeeperDiscoverySpiTestSuite1: ZookeeperClientTest.testReconnect1_InCallback - Test has low fail rate in base branch 0,0% and is not flaky {color:#d04437}Cache 2{color} [[tests 0 TIMEOUT , Exit Code |https://ci.ignite.apache.org/viewLog.html?buildId=4793545]] {panel} [TeamCity *--> Run :: All* Results|https://ci.ignite.apache.org/viewLog.html?buildId=4793595&buildTypeId=IgniteTests24Java8_RunAll]) > Allow to use cache-related permissions both at system and per-cache levels > -------------------------------------------------------------------------- > > Key: IGNITE-12220 > URL: https://issues.apache.org/jira/browse/IGNITE-12220 > Project: Ignite > Issue Type: Task > Components: security > Affects Versions: 2.7.6 > Reporter: Andrey Kuznetsov > Assignee: Sergei Ryzhov > Priority: Major > Time Spent: 5.5h > Remaining Estimate: 0h > > Currently, {{CACHE_CREATE}} and {{CACHE_DESTROY}} permissions are enforced to > be system-level permissions, see for instance > {{SecurityPermissionSetBuilder#appendCachePermissions}}. This looks > inflexible: Ignite Security implementations are not able to manage cache > creation and deletion permissions on per-cache basis (unlike get/put/remove > permissions). All such limitations should be found and removed in order to > allow all {{CACHE_*}} permissions to be set both at system and per-cache > levels. -- This message was sent by Atlassian Jira (v8.3.4#803005)