[GEODE-2146] function "deploy" only requires DATA:MANAGE privilege, but a malicious user can write a function to change the securityManager and then execute anything

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.1.0
• Component/s: docs, security
• Assignee: Jinmei Liao
• Reporter: Jinmei Liao
• Created: 29/Nov/16 17:06
• Updated: 09/Feb/17 00:40
• Resolved: 01/Dec/16 17:39

Description

A simple function would do the following:

SecurityUtils.setSecurityManager(null);

This would jeopardize all the security checks afterwards and let user do pretty much everything.

We should either sandbox the function execution or have deploy require ALL permissions.