There were many updates between 1.0.0 and 1.1.1. You can check out the
Release Notes page here [1]. From there you can get access to the listing
of issues addressed in each release.

If the source of the connection happens to be a Remote Process Group then
you likely hit the underlying issue addressed here [2].

Thanks

Matt

[1] https://cwiki.apache.org/confluence/display/NIFI/
Release+Notes#ReleaseNotes-Version1.1.1
[2] https://issues.apache.org/jira/browse/NIFI-3133

On Tue, Jan 10, 2017 at 11:12 AM, Alessio Palma <
[email protected]> wrote:

> Hello Gilman,
>
> I found a way to have it working. I give view data and modify data
> policies to my user too.
>
> Nifi 1.0.0  was working without this setting and using nifi-1.1.1 need it.
>
>
> What are the differences between 1.0.0 and 1.1.1 about this point ?
> ------------------------------
> *From:* Matt Gilman <[email protected]>
> *Sent:* Tuesday, January 10, 2017 3:43:46 PM
> *To:* [email protected]
> *Subject:* Re: nifi 1.1.1 : Unable to empty queues
>
> If your instance is clustered, you'll need to authorize the nodes with the
> data policies as well. Any 'data-plane' endpoint (where data or meta-data
> is returned or modified) will require the nodes in the request chain to
> also be approved for access as the data will traverse some of them when the
> request is replicated. 'Control-plane' endpoints (where data flow
> configuration is retrieved/modified) are not subject to the additional
> check.
>
> FYI, there was a recent improvement committed the master branch that
> provides some level of details regarding the insufficient privileges. This
> should make it into the next release (1.2.0).
>
> Matt
>
> On Tue, Jan 10, 2017 at 9:36 AM, Alessio Palma <
> [email protected]> wrote:
>
>> Hello all,
>> I'm checking nifi 1.1.1 before moving it to production and something
>> weird is happening when I try to empty a queue.
>> System replies telling I'm unable to perform the desired action due to
>> insufficient permissions. My user has any available rule.
>> What can I check ?
>> Any suggestions?
>>
>> Thanks in advance for your time.
>>
>>
>>
>>
>

Reply via email to