Details

      Description

      It appears that BULK_READ permission is nor properly wired/transferred into API invocations. When attempting to access schema names we get the following exceptions in the server:

      [Server:server-two] 11:51:44,982 ERROR [org.jboss.as.controller.management-operation] (ServerService Thread Pool – 33) WFLYCTL0013: Operation ("get-proto-schema-names") failed - address: ([
      [Server:server-two] ("subsystem" => "datagrid-infinispan"),
      [Server:server-two] ("cache-container" => "clustered")
      [Server:server-two] ]) - failure description: "DGISPN0118: Failed to invoke operation: ISPN000287: Unauthorized access: subject 'Subject with principal(s): [vladimir@ManagementRealm, InetAddressPrincipal <127.0.0.1/127.0.0.1>]' lacks 'BULK_READ' permission"

      However, we have set this permission for the role identity/role making invocations (i.e vladimir in the example above)

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  NadirX Tristan Tarrant
                  Reporter:
                  vblagojevic Vladimir Blagojevic
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  1 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: