You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ignite.apache.org by "Anton Vinogradov (Jira)" <ji...@apache.org> on 2020/04/22 09:08:00 UTC
[jira] [Issue Comment Deleted] (IGNITE-9560) Security Engine fixes
and test coverage. Phase #1.
[ https://issues.apache.org/jira/browse/IGNITE-9560?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Anton Vinogradov updated IGNITE-9560:
-------------------------------------
Comment: was deleted
(was: {panel:title=Branch: [pull/6343/head] Base: [master] : Possible Blockers (33)|borderStyle=dashed|borderColor=#ccc|titleBGColor=#F7D6C1}
{color:#d04437}Platform .NET (Long Running){color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422386]]
* exe: IgniteStartStopTest.TestProcessorInit - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}MVCC Cache 7{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422404]]
* IgniteCacheMvccTestSuite7: MvccCacheGroupMetricsMBeanTest.testCacheGroupMetrics - History for base branch is absent.
{color:#d04437}Cache 7{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422366]]
* IgniteCacheTestSuite7: TransactionIntegrityWithPrimaryIndexCorruptionTest.testPrimaryIndexCorruptionDuringCommitPrimaryColocatedThrowsUnchecked - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}SPI{color} [[tests 4|https://ci.ignite.apache.org/viewLog.html?buildId=3422327]]
* IgniteSpiTestSuite: TcpDiscoveryWithWrongServerTest.testDisconnectOnRequest - Test has low fail rate in base branch 0,0% and is not flaky
* IgniteSpiTestSuite: TcpDiscoveryWithWrongServerTest.testWrongHandshakeResponse - Test has low fail rate in base branch 0,0% and is not flaky
* IgniteSpiTestSuite: TcpDiscoveryWithWrongServerTest.testEarlyDisconnect - Test has low fail rate in base branch 0,0% and is not flaky
* IgniteSpiTestSuite: TcpDiscoveryWithWrongServerTest.testNoHandshakeResponse - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}Examples{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422308]]
* IgniteExamplesSelfTestSuite: HelloWorldGAExampleSelfTest.testExample - New test duration 62s is more that 1 minute
{color:#d04437}Platform .NET{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422382]]
* exe: PartitionLossTest.TestReadOnlyAll - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}MVCC PDS 1{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422407]]
* IgnitePdsMvccTestSuite: IgniteClusterActivateDeactivateTestWithPersistence.testDeactivateDuringEvictionAndRebalance - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}MVCC PDS 4{color} [[tests 14|https://ci.ignite.apache.org/viewLog.html?buildId=3424608]]
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_10_500_8_16 - New test duration 97s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_10_10_1_1 - New test duration 98s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_1000_20000_8_16 - New test duration 99s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_8000_8_16 - New test duration 111s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_1000_500_1_1 - New test duration 98s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_8000_1_1 - New test duration 115s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_1000_500_8_16 - New test duration 98s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_8000_8_1 - New test duration 114s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_500_8_1 - New test duration 100s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_500_1_1 - New test duration 113s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_1000_20000_1_1 - New test duration 98s is more that 1 minute
... and 3 tests blockers
{color:#d04437}Queries 2{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422322]]
* IgniteBinaryCacheQueryTestSuite2: IgniteCacheQueriesLoadTest1.testQueries - New test duration 87s is more that 1 minute
{color:#d04437}Cache 3{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422362]]
* IgniteBinaryObjectsCacheTestSuite3: GridCacheNearOnlyTopologySelfTest.testNodeLeave - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}PDS (Compatibility){color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422374]]
* IgniteCompatibilityBasicTestSuite: FoldersReuseCompatibilityTest.testFoldersReuseCompatibility_2_1 - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}Continuous Query 1{color} [[tests 4|https://ci.ignite.apache.org/viewLog.html?buildId=3422306]]
* IgniteCacheQuerySelfTestSuite3: CacheContinuousQueryFailoverAtomicNearEnabledSelfSelfTest.testUpdatePartitionCounter - New test duration 74s is more that 1 minute
* IgniteCacheQuerySelfTestSuite3: CacheContinuousQueryFailoverAtomicNearEnabledSelfSelfTest.testMultiThreadedFailover - New test duration 64s is more that 1 minute
* IgniteCacheQuerySelfTestSuite3: CacheContinuousQueryFailoverAtomicNearEnabledSelfSelfTest.testFailoverStartStopBackup - New test duration 66s is more that 1 minute
* IgniteCacheQuerySelfTestSuite3: CacheContinuousQueryFailoverAtomicNearEnabledSelfSelfTest.testMultiThreaded - History for base branch is absent.
{color:#d04437}Client Nodes{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422302]]
* IgniteClientReconnectTestSuite: IgniteClientRejoinTest.testClientsReconnectAfterStart - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}MVCC PDS 3{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3422409]]
* IgnitePdsMvccTestSuite3: IgnitePdsContinuousRestartTest.testRebalancingDuringLoad_10_10_1_1 - Test has low fail rate in base branch 0,0% and is not flaky
{panel}
[TeamCity *--> Run :: All* Results|https://ci.ignite.apache.org/viewLog.html?buildId=3422412&buildTypeId=IgniteTests24Java8_RunAll])
> Security Engine fixes and test coverage. Phase #1.
> --------------------------------------------------
>
> Key: IGNITE-9560
> URL: https://issues.apache.org/jira/browse/IGNITE-9560
> Project: Ignite
> Issue Type: Task
> Components: security
> Affects Versions: 2.6
> Reporter: Anton Vinogradov
> Assignee: Anton Vinogradov
> Priority: Major
> Labels: vulnerability
> Fix For: 2.8
>
>
> Compute and other Public API, which able to run arbitrary code at a remote node, now run it with remote node permissions.
> Affected API:
> - IgniteEvents,
> - CQ,
> - Compute,
> - Services,
> - Entry processor,
> - Data Streamer,
> - Scan Query,
> - Cache load,
> - Messaging,
> - ...
> So, the original security context now ignored at remote executions.
> We have to
> 1) Fix Security Engine to use original Security Context at remote executions
> 2) Cover every securable public API (only most important list at phase #1) with appropriate tests
> - API required special permissions to be executed, should be checked to require them
> - Remote executions should be checked to be executed at the original Security Context
--
This message was sent by Atlassian Jira
(v8.3.4#803005)