[jira] [Created] (IGNITE-12220) Allow to use cache-related permissions both at system and per-cache levels

["Andrey Kuznetsov (Jira)" <ji...@apache.org>]

Andrey Kuznetsov created IGNITE-12220:
-----------------------------------------

             Summary: Allow to use cache-related permissions both at system and per-cache levels
                 Key: IGNITE-12220
                 URL: https://issues.apache.org/jira/browse/IGNITE-12220
             Project: Ignite
          Issue Type: Task
          Components: security
    Affects Versions: 2.7.6
            Reporter: Andrey Kuznetsov
            Assignee: Andrey Kuznetsov
             Fix For: 2.8


Currently, {{CACHE_CREATE}} and {{CACHE_DESTROY}} permissions are enforced to be system-level permissions, see for instance {{SecurityPermissionSetBuilder#appendCachePermissions}}. This looks inflexible: Ignite Security implementations are not able to manage cache creation and deletion permissions on per-cache basis (unlike get/put/remove permissions). All such limitations should be found and removed on order to allow all {{CACHE_*}} permissions to be set both at system and per-cache levels.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)