Denis Garus created IGNITE-11718: ------------------------------------ Summary: Authorizing of SERVICE_INVOKE permission Key: IGNITE-11718 URL: https://issues.apache.org/jira/browse/IGNITE-11718 Project: Ignite Issue Type: Improvement Affects Versions: 2.7 Reporter: Denis Garus
We authorize SERVICE_INVOKE only once on creation of service instance however, we have to authorize SERVICE_INVOKE whenever an operation is invoked on the service instance. If we change some permissions in runtime right after a client got instance, it doesn't see those changes. The scenario: * Client A creates a service instance B. * Administrator forbids invocation of service B to client A. * As long as client A keeps service instance, it can invoke any methods of service B. -- This message was sent by Atlassian JIRA (v7.6.3#76005)