[jira] [Commented] (IGNITE-11992) Improvements for new security approach

["Stepachev Maksim (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/IGNITE-11992?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16939211#comment-16939211 ] 

Stepachev Maksim commented on IGNITE-11992:
-------------------------------------------

New PR:https://github.com/apache/ignite/pull/6918

> Improvements for new security approach
> --------------------------------------
>
>                 Key: IGNITE-11992
>                 URL: https://issues.apache.org/jira/browse/IGNITE-11992
>             Project: Ignite
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 2.8
>            Reporter: Stepachev Maksim
>            Assignee: Stepachev Maksim
>            Priority: Major
>             Fix For: 2.8
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> 1. The visor tasks lost permission. 
>  The method VisorQueryUtils#scheduleQueryStart makes a new thread and loses context.
>  3. The GridRestProcessor does tasks outside "withContext" section. As result context loses.
>  4. The GridRestProcessor isn't client, we can't read security subject from node attribute. 
>  We should transmit secCtx for fake nodes and secSubjId for real.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)