[IGNITE-14005] IgniteClient.cache() method

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.9.1
• Component/s: binary
• Ignite Flags: Docs Required, Release Notes Required
• Assignee: Unassigned
• Reporter: ERIC FOONG CHEE SOON
• Created: 17/Jan/21 05:46
• Updated: 17/Jan/21 05:46

Description

I use apache ignite 2.9.1

Found that org.apache.ignite.client.IgniteCache.cache() method does not have security check. 

For example:

ClientConfiguration config = new ClientConfiguration()
.setAddresses("127.0.0.1:10800")
.setUserName("user01")
.setUserPassword(null);

try (IgniteClient client = Ignition.startClient(config))

{ ClientCache<String, String> cache = client.cache("common_cache"); cache.put("key", "some_value"); System.out.println("Cache " + cache.getName() + " key=" + cache.get("key")); }

 

Found that client.cache("common_cache") does not have the security permission check.