[GEODE-9547] Enable Redis Server to Authorize Using Security Manager

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.15.0
• Component/s: redis
• Labels: pull-request-available redis
• Assignee: Jens Deppe
• Reporter: Wayne
• Created: 24/Aug/21 21:48
• Updated: 22/Jun/22 20:46
• Resolved: 23/Sep/21 20:29

Description

Every Redis Command/API invocation must be authorized against the customer provided Security Manager.

 

The SecurityManager.authorize method must be called for every Redis API call using the principal returned by the SecurityManager.authenticate method during the authentication process.

The ResourcePermission passed to the authorize method should be the same for all operations. The actual permission string is TBD - perhaps DATA:WRITE:REDIS_DATA ?? In the future we may provide more fine grained support with different ResourcePermissions for different redis operations.

Acceptance Criteria

TBD

 

Issue Links

• is blocked by: GEODE-9546 Enable Redis Server to Authenticate Using SecurityManager
• links to: GitHub Pull Request #6883