[IGNITE-12851] Inconsistent CACHE_CREATE/DESTROY authorization logic API IgniteClient and REST

• Type: Wish
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 2.8
• Component/s: security
• Ignite Flags: Docs Required, Release Notes Required
• Assignee: Sergei Ryzhov
• Reporter: Sergei Ryzhov
• Created: 01/Apr/20 08:56
• Updated: 20/Nov/20 15:21

Description

Now the work of permissions for API IgniteClient and REST is different.
To create/delete a cache:
IgniteClient authorises CACHE_CREATE/CACHE_DESTROY.(GridCacheProcessor#authorizeCacheCreate, authorizeCacheDestroy)
REST authorises ADMIN_CACHE.(GridRestProcessor#authorize)
I think this is inconsistent.

Issue Links

• links to: GitHub Pull Request #7601