Uploaded image for project: 'Geode'
  1. Geode
  2. GEODE-7351

Verify constraints when changing the MethodInvocationAuthorizer

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 1.12.0
    • querying, tests

    Description

      Add concurrent distributed tests to make sure the following conditions are met once there is an API implemented to change the MethodInvocationAuthorizer in runtime:

      • Once a query execution starts, the MethodInvocationAuthorizer used can not be changed for that particular query.
      • Once the MethodInvocationAuthorizer is changed through the API or the alter-query-service command, all queries executed afterwards use the newly configured MethodInvocationAuthorizer.
      • Any continuous query already running should pick up the new MethodInvocationAuthorizer the next time the query is internally executed to detect whether a cache event matches or not. If the continuous query has methods that are not authorized by the newly configured MethodInvocationAuthorizer, then any matching events from that moment on should invoke CqListener.onError instead of CqListener.onEvent.
      • Any configured index should pick up the newly configured MethodInvocationAuthorizer the next time an entry is added or removed from the index (regular region operations), and the index should be marked as invalid if it uses method invocations not authorized by the newly configured MethodInvocationAuthorizer.

      Attachments

        Issue Links

          is a child of

          New Feature - A new feature of the product, which has yet to be developed. GEODE-6983 Epic for OQL Method Invocation Security

          • Major - Major loss of function.
          • Closed
          is blocked by

          Bug - A problem which impairs or prevents the functions of the product. GEODE-7486 IndexManager is not consistent

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. GEODE-6990 Implement Configuration Options for Method Authorizer

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. GEODE-6991 Create AlterQueryService GFSH Command

          • Major - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. GEODE-6995 Use the Correct MethodInvocationAuthorizer

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. GEODE-7283 OQL Method Authorizer in Query Execution Context

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. GEODE-7313 Refactor QuerySecurityBase

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. GEODE-7487 Running CQs should always use the latest installed Method Invocation Authorizer

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. GEODE-7497 QueryConfigurationService: Execute CQ Sanity Check Before Changing the MethodInvocationAuthorizer

          • Major - Major loss of function.
          • Closed
          links to

          Web Link GitHub Pull Request #4416

          Activity

            People

              echobravo Ernest Burghardt
              jjramos Juan Ramos
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 2.5h
                  2.5h