[IGNITE-9988] Thin client: integration with 3rd party security may not work properly

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6
• Fix Version/s: 2.8
• Component/s: security, sql
• Labels: security vulnerability
• Assignee: Vladimir Ozerov
• Reporter: Vladimir Ozerov
• Created: 24/Oct/18 13:09
• Updated: 22/Apr/20 08:27
• Resolved: 01/Nov/18 09:26

Description

Current thin client handler can delegate to 3rd party security if it is enabled. However, it fails to set proper security context. As a result, certain operations may remain unauthorized.