You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ignite.apache.org by "Ignite TC Bot (Jira)" <ji...@apache.org> on 2020/04/22 08:47:00 UTC
[jira] [Commented] (IGNITE-9560) Security Engine fixes and test
coverage. Phase #1.
[ https://issues.apache.org/jira/browse/IGNITE-9560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17089463#comment-17089463 ]
Ignite TC Bot commented on IGNITE-9560:
---------------------------------------
{panel:title=Branch: [pull/4922/head] Base: [master] : Possible Blockers (39)|borderStyle=dashed|borderColor=#ccc|titleBGColor=#F7D6C1}
{color:#d04437}PDS (Indexing){color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689073]]
* IgnitePdsWithIndexingCoreTestSuite: IgnitePdsDiskErrorsRecoveringTest.testRecoveringOnWALWritingFail2 - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}MVCC Cache 7{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689099]]
* IgniteCacheMvccTestSuite7: MvccCacheGroupMetricsMBeanTest.testCacheGroupMetrics - History for base branch is absent.
{color:#d04437}Cache 7{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689063]]
* IgniteCacheTestSuite7: WalModeChangeAdvancedSelfTest.testClientReconnect - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}Examples{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689005]]
* IgniteExamplesSelfTestSuite: HelloWorldGAExampleSelfTest.testExample - New test duration 178s is more that 1 minute
{color:#d04437}Platform .NET{color} [[tests 4|https://ci.ignite.apache.org/viewLog.html?buildId=3689079]]
* exe: PartitionLossTest.TestReadOnlyAll - Test has low fail rate in base branch 0,0% and is not flaky
* exe: PartitionLossTest.TestReadWriteAll - Test has low fail rate in base branch 0,0% and is not flaky
* exe: PartitionLossTest.TestReadWriteSafe - Test has low fail rate in base branch 0,0% and is not flaky
* exe: PersistenceTest.TestBaselineTopology - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}Queries 1{color} [[tests 2|https://ci.ignite.apache.org/viewLog.html?buildId=3689085]]
* IgniteBinaryCacheQueryTestSuite: IgniteSqlNotNullConstraintTest.testReadThroughRestrictionAlterTable - Test has low fail rate in base branch 0,0% and is not flaky
* IgniteBinaryCacheQueryTestSuite: IgniteSqlNotNullConstraintTest.testReadThroughRestrictionCreateTable - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}MVCC Queries{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3697002]]
* IgniteCacheMvccSqlTestSuite: CacheMvccReplicatedSqlQueriesTest.testAccountsTxSql_SingleNode_Persistence - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}Cache 2{color} [[tests 2|https://ci.ignite.apache.org/viewLog.html?buildId=3689058]]
* IgniteCacheTestSuite2: CacheTxLoadingConcurrentGridStartSelfTestAllowOverwrite.testLoadCacheWithDataStreamerSequentialWithConfigAndRestarts - Test has low fail rate in base branch 0,0% and is not flaky
* IgniteCacheTestSuite2: cache.CacheExchangeMessageDuplicatedStateTest - History for base branch is absent.
{color:#d04437}JDBC Driver{color} [[tests 0 TIMEOUT , Exit Code |https://ci.ignite.apache.org/viewLog.html?buildId=3699923]]
{color:#d04437}MVCC PDS 1{color} [[tests 2|https://ci.ignite.apache.org/viewLog.html?buildId=3689102]]
* IgnitePdsMvccTestSuite: IgniteClusterActivateDeactivateTestWithPersistence.testDeactivateSimple_5_Servers_5_Clients_FromClient - Test has low fail rate in base branch 0,0% and is not flaky
* IgnitePdsMvccTestSuite: IgniteClusterActivateDeactivateTestWithPersistence.testDeactivateDuringEvictionAndRebalance - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}MVCC PDS 2{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689103]]
* IgnitePdsMvccTestSuite2: IgniteNodeStoppedDuringDisableWALTest.test - History for base branch is absent.
{color:#d04437}MVCC PDS 4{color} [[tests 14|https://ci.ignite.apache.org/viewLog.html?buildId=3689105]]
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_10_500_8_16 - New test duration 103s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_10_10_1_1 - New test duration 110s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_1000_20000_8_16 - New test duration 107s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_8000_8_16 - New test duration 118s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_1000_500_1_1 - New test duration 108s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_8000_1_1 - New test duration 114s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_1000_500_8_16 - New test duration 109s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_8000_8_1 - New test duration 117s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_500_8_1 - New test duration 103s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_8000_500_1_1 - New test duration 122s is more that 1 minute
* IgnitePdsMvccTestSuite4: IgnitePdsContinuousRestartTestWithSharedGroupAndIndexes.testRebalancingDuringLoad_1000_20000_1_1 - New test duration 109s is more that 1 minute
... and 3 tests blockers
{color:#d04437}Queries 2{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689019]]
* IgniteBinaryCacheQueryTestSuite2: IgniteCacheQueriesLoadTest1.testQueries - New test duration 62s is more that 1 minute
{color:#d04437}Data Structures{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689069]]
* IgniteCacheDataStructuresSelfTestSuite: GridCachePartitionedSetWithClientSelfTest.testMultithreaded - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}Java Client{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689012]]
* IgniteClientTestSuite: TcpRouterMultiNodeSelfTest.testTopologyListener - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}PDS (Compatibility){color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689071]]
* IgniteCompatibilityBasicTestSuite: PersistenceBasicCompatibilityTest.testNodeStartByOldVersionPersistenceData_2_2 - Test has low fail rate in base branch 0,0% and is not flaky
{color:#d04437}Continuous Query 1{color} [[tests 3|https://ci.ignite.apache.org/viewLog.html?buildId=3689003]]
* IgniteCacheQuerySelfTestSuite3: CacheContinuousQueryFailoverAtomicNearEnabledSelfSelfTest.testUpdatePartitionCounter - New test duration 72s is more that 1 minute
* IgniteCacheQuerySelfTestSuite3: CacheContinuousQueryFailoverAtomicNearEnabledSelfSelfTest.testMultiThreadedFailover - New test duration 63s is more that 1 minute
* IgniteCacheQuerySelfTestSuite3: CacheContinuousQueryFailoverAtomicNearEnabledSelfSelfTest.testFailoverStartStopBackup - New test duration 70s is more that 1 minute
{color:#d04437}MVCC PDS 3{color} [[tests 1|https://ci.ignite.apache.org/viewLog.html?buildId=3689104]]
* IgnitePdsMvccTestSuite3: IgnitePdsContinuousRestartTest.testRebalancingDuringLoad_10_10_1_1 - Test has low fail rate in base branch 0,0% and is not flaky
{panel}
[TeamCity *--> Run :: All* Results|https://ci.ignite.apache.org/viewLog.html?buildId=3689108&buildTypeId=IgniteTests24Java8_RunAll]
> Security Engine fixes and test coverage. Phase #1.
> --------------------------------------------------
>
> Key: IGNITE-9560
> URL: https://issues.apache.org/jira/browse/IGNITE-9560
> Project: Ignite
> Issue Type: Task
> Components: security
> Affects Versions: 2.6
> Reporter: Anton Vinogradov
> Assignee: Anton Vinogradov
> Priority: Major
> Labels: vulnerability
> Fix For: 2.8
>
>
> Compute and other Public API, which able to run arbitrary code at a remote node, now run it with remote node permissions.
> Affected API:
> - IgniteEvents,
> - CQ,
> - Compute,
> - Services,
> - Entry processor,
> - Data Streamer,
> - Scan Query,
> - Cache load,
> - Messaging,
> - ...
> So, the original security context now ignored at remote executions.
> We have to
> 1) Fix Security Engine to use original Security Context at remote executions
> 2) Cover every securable public API (only most important list at phase #1) with appropriate tests
> - API required special permissions to be executed, should be checked to require them
> - Remote executions should be checked to be executed at the original Security Context
--
This message was sent by Atlassian Jira
(v8.3.4#803005)