You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ignite.apache.org by "Denis Garus (JIRA)" <ji...@apache.org> on 2019/04/10 12:30:00 UTC
[jira] [Created] (IGNITE-11718) Authorizing of SERVICE_INVOKE
permission
Denis Garus created IGNITE-11718:
------------------------------------
Summary: Authorizing of SERVICE_INVOKE permission
Key: IGNITE-11718
URL: https://issues.apache.org/jira/browse/IGNITE-11718
Project: Ignite
Issue Type: Improvement
Affects Versions: 2.7
Reporter: Denis Garus
We authorize SERVICE_INVOKE only once on creation of service instance
however, we have to authorize SERVICE_INVOKE whenever an operation is invoked on the service instance.
If we change some permissions in runtime right after a client got instance, it doesn't see those changes.
The scenario:
* Client A creates a service instance B.
* Administrator forbids invocation of service B to client A.
* As long as client A keeps service instance, it can invoke any methods of service B.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)