[GEODE-1909] A user with no privilege can start a server

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.0.0-incubating
• Labels: management
• Assignee: Jinmei Liao
• Reporter: Jinmei Liao
• Created: 19/Sep/16 18:13
• Updated: 27/Dec/16 22:38
• Resolved: 27/Dec/16 22:38

Description

1) Start the locator with a security-manager:
start locator --name=loc1 --security-properties-file=security.properties --classpath=/Users/jiliao/my_gemfire/security

2) connect to the locator using: guest/guest

3), try start a server as guest:
start server --name=server1 --security-properties-file=serverSecurity.properties --locators=localhost[10334]

The server will be started.

We should allow only user with CLUSTER:MANAGE permission to start a server.