[IGNITE-9454] SecurityPermissionSetBuilder fails to append system permission CACHE_CREATE

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.5
• Fix Version/s: 2.8
• Component/s: security
• Labels: easyfix
• Ignite Flags: Docs Required
• Assignee: Ilya Kasnacheev
• Reporter: Alexey Kukushkin
• Created: 03/Sep/18 13:05
• Updated: 26/Oct/18 08:37
• Resolved: 26/Oct/18 08:33

Description

SecurityPermissionSetBuilder fails to append system permission CACHE_CREATE, CACHE_DESTROY and JOIN_AS_SERVER

Reproducer:

SecurityPermissionSetBuilder.create().appendSystemPermission(SecurityPermission.CACHE_CREATE)

The code above throw IgniteException saying that a security permission name should begin with either EVENTS_ or ADMIN_

Solution:

Update SecurityPermissionSetBuilder to:

1. allow system permissions CACHE_CREATE, CACHE_DESTROY and JOIN_AS_SERVER
2. restrict cache presmissions CACHE_CREATE, CACHE_DESTROY
3. add automated tests

 

Issue Links

• is caused by: IGNITE-8221 Cache management and server node authorisation
• links to: GitHub Pull Request #5066