Uploaded image for project: 'Geode'
  1. Geode
  2. GEODE-6983

Epic for OQL Method Invocation Security

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 1.12.0
    • querying, security
    • None

    Description

      Top level ticket to implement the OQL Method Security Proposal. Any deviation that might arise during the actual implementation should be throughly documented under the Errata Section.

      Attachments

        Issue Links

        is a parent of

        Bug - A problem which impairs or prevents the functions of the product. GEODE-7396 JavaBeanAccessorMethodAuthorizer does not authorize methods on java.io classes

        • Major - Major loss of function.
        • Closed

        Bug - A problem which impairs or prevents the functions of the product. GEODE-7486 IndexManager is not consistent

        • Major - Major loss of function.
        • Closed

        Bug - A problem which impairs or prevents the functions of the product. GEODE-7279 Warning message for deprecated allowUntrustedMethodInvocation should be only logged once

        • Minor - Minor loss of function, or other problem where easy workaround is present.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6984 Publish MethodInvocationAuthorizer and RestrictedMethodInvocationAuthorizer

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6985 Implement RestrictedMethodAuthorizer

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6986 Implement UnrestrictedMethodAuthorizer

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6987 Implement RegExMethodAuthorizer

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6988 Implement JavaBeanAccessorMethodAuthorizer

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6989 Use Caching for Already Authorized Methods

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6990 Implement Configuration Options for Method Authorizer

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6991 Create AlterQueryService GFSH Command

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6992 Deprecate allowUntrustedMethodInvocation System Property

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6993 Documentation for alter query-service command

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6994 Documentation for OQL Method Invocation Security

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-6995 Use the Correct MethodInvocationAuthorizer

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-7337 Create DescribeQueryService GFSH Command

        • Major - Major loss of function.
        • Closed

        New Feature - A new feature of the product, which has yet to be developed. GEODE-7405 Documentation for describe query-service command

        • Major - Major loss of function.
        • Closed

        Improvement - An improvement or enhancement to an existing feature or task. GEODE-7283 OQL Method Authorizer in Query Execution Context

        • Major - Major loss of function.
        • Closed

        Improvement - An improvement or enhancement to an existing feature or task. GEODE-7313 Refactor QuerySecurityBase

        • Major - Major loss of function.
        • Closed

        Improvement - An improvement or enhancement to an existing feature or task. GEODE-7320 Rename isKnownDangerousMethod

        • Major - Major loss of function.
        • Closed

        Improvement - An improvement or enhancement to an existing feature or task. GEODE-7351 Verify constraints when changing the MethodInvocationAuthorizer

        • Major - Major loss of function.
        • Closed

        Improvement - An improvement or enhancement to an existing feature or task. GEODE-7487 Running CQs should always use the latest installed Method Invocation Authorizer

        • Major - Major loss of function.
        • Closed

        Improvement - An improvement or enhancement to an existing feature or task. GEODE-7497 QueryConfigurationService: Execute CQ Sanity Check Before Changing the MethodInvocationAuthorizer

        • Major - Major loss of function.
        • Closed

        Wish - General wishlist item. GEODE-7452 MethodInvocationAuthorizer should be unique per cluster

        • Major - Major loss of function.
        • Resolved

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            echobravo Ernest Burghardt
            jjramos Juan Ramos
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment