[ https://issues.apache.org/jira/browse/IGNITE-9472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16604399#comment-16604399 ]
Ivan Bessonov commented on IGNITE-9472: --------------------------------------- [~ilantukh], thank you! I started tests on Ignite TeamCity, results are not available yet. Considering test for the functionality - complex test with GridClient will be available in corresponding GridGain branch, it's already written and waits for this ticket to be resolved. It can't be done here because "ctx.security().authorize(...)" does nothing by default in Ignite. > REST API has no permission checks for cluster activation/deactivation > --------------------------------------------------------------------- > > Key: IGNITE-9472 > URL: https://issues.apache.org/jira/browse/IGNITE-9472 > Project: Ignite > Issue Type: Bug > Reporter: Ivan Bessonov > Assignee: Ivan Bessonov > Priority: Major > > ADMIN_OPS permission should be required for CLUSTER_ACTIVE / CLUSTER_INACTIVE > commands. This has to be done in GridRestProcessor.authorize method. -- This message was sent by Atlassian JIRA (v7.6.3#76005)