You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Francisco Guerrero (Jira)" <ji...@apache.org> on 2025/12/02 21:48:00 UTC
[jira] [Updated] (CASSSIDECAR-367) CachedAuthorizationHandler should pause and resume request while performing authZ operations
[ https://issues.apache.org/jira/browse/CASSSIDECAR-367?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Francisco Guerrero updated CASSSIDECAR-367:
-------------------------------------------
Bug Category: Parent values: Correctness(12982)Level 1 values: Unrecoverable Corruption / Loss(13161)
Complexity: Normal
Component/s: Security
Discovered By: User Report
Fix Version/s: 0.3
Severity: Normal
Status: Open (was: Triage Needed)
PR: https://github.com/apache/cassandra-sidecar/pull/295
CI: https://app.circleci.com/pipelines/github/frankgh/cassandra-sidecar?branch=CASSSIDECAR-367
> CachedAuthorizationHandler should pause and resume request while performing authZ operations
> --------------------------------------------------------------------------------------------
>
> Key: CASSSIDECAR-367
> URL: https://issues.apache.org/jira/browse/CASSSIDECAR-367
> Project: Sidecar for Apache Cassandra
> Issue Type: Bug
> Components: Security
> Reporter: Yifan Cai
> Assignee: Francisco Guerrero
> Priority: Major
> Fix For: 0.3
>
>
> CachedAuthorizationHandler does not current pause the request. Data is continue buffered during the authZ operations. It is not efficient if the request should be rejected, which also adds heap pressure in the system. The request should be paused when starting the authZ operations and resumed on completion, just like what is implemented in io.vertx.ext.web.handler.impl.AuthorizationHandlerImpl.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org