You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ignite.apache.org by "Denis Garus (JIRA)" <ji...@apache.org> on 2019/04/10 12:30:00 UTC

[jira] [Created] (IGNITE-11718) Authorizing of SERVICE_INVOKE permission

Denis Garus created IGNITE-11718:
------------------------------------

             Summary: Authorizing of SERVICE_INVOKE permission
                 Key: IGNITE-11718
                 URL: https://issues.apache.org/jira/browse/IGNITE-11718
             Project: Ignite
          Issue Type: Improvement
    Affects Versions: 2.7
            Reporter: Denis Garus


We authorize SERVICE_INVOKE only once on creation of service instance 
however, we have to authorize SERVICE_INVOKE whenever an operation is invoked on the service instance.
If we change some permissions in runtime right after a client got instance, it doesn't see those changes.
The scenario:
 * Client A creates a service instance B.
 * Administrator forbids invocation of service B to client A.
 * As long as client A keeps service instance, it can invoke any methods of service B.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)