[GEODE-6990] Implement Configuration Options for Method Authorizer

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Implemented
• Fix Version/s: 1.12.0
• Component/s: configuration
• Labels: GeodeCommons
• Assignee: Donal Evans
• Reporter: Juan Ramos
• Created: 19/Jul/19 16:22
• Updated: 30/Mar/20 23:38
• Resolved: 13/Nov/19 21:38

Description

Create a new QueryServiceConfig element at the CacheConfig level to contain any configuration related to the query service, including the custom MethodInvocationAuthorizer.
The resulting XML element should be as follows:

<query-service>
 <method-authorizer>
   <class-name>MyClass</class-name>
   <parameter name="myClassAttribute">
     <string>stringValue</string>
   </parameter>
 </method-authorizer>
</query-service>

Instead of modifying the core cache-1.0.xsd, add another independent xsd file as an extension of the cache’s configuration. An example of how to do this can be seen in jdbc-1.0.xsd.
This new configuration element and its properties should be stored and retrieved through the cluster configuration service. For more details regarding the interactions with the cluster configuration service see For extension developers: How to Add Elements Managed by Cluster Configuration Service.

Issue Links

• blocks: GEODE-6991 Create AlterQueryService GFSH Command
• blocks: GEODE-6995 Use the Correct MethodInvocationAuthorizer
• blocks: GEODE-7351 Verify constraints when changing the MethodInvocationAuthorizer
• is a child of: GEODE-6983 Epic for OQL Method Invocation Security
• is blocked by: GEODE-6984 Publish MethodInvocationAuthorizer and RestrictedMethodInvocationAuthorizer
• links to: GitHub Pull Request #4161