Loading...

XML

Word

Printable

Type: Task
Resolution: Done
Priority: Major
Fix Version/s: 9.0.0.Alpha2, 9.0.0.Final
Affects Version/s: None
Component/s: Remote Protocols, Server
Labels:
None

Git Pull Request:
https://github.com/infinispan/infinispan/pull/4227

The server protocols currently allow access to internal user caches (such as the script and schema caches) if authorization is disabled. We should instead not allow access.

blocks

JDG-285 Protect internal caches from remote access when security is disabled

Closed

causes

ISPN-7814 Remove auth check in CacheDecodeContext

Closed

relates to

ISPN-6454 Schema cache should require a special role when authorization is enabled

Closed

Assignee:: Tristan Tarrant

Reporter:: Tristan Tarrant

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Created:: 2016/03/31 8:31 AM

Updated:: 2020/09/30 2:50 PM

Resolved:: 2016/04/20 10:31 AM

Details

Description

Attachments

Issue Links

Activity

People

Dates