[
https://issues.apache.org/jira/browse/IGNITE-9472?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dmitriy Govorukhin updated IGNITE-9472:
---------------------------------------
Fix Version/s: 2.7
> REST API has no permission checks for cluster activation/deactivation
> ---------------------------------------------------------------------
>
> Key: IGNITE-9472
> URL: https://issues.apache.org/jira/browse/IGNITE-9472
> Project: Ignite
> Issue Type: Bug
> Reporter: Ivan Bessonov
> Assignee: Ivan Bessonov
> Priority: Major
> Fix For: 2.7
>
>
> ADMIN_OPS permission should be required for CLUSTER_ACTIVE / CLUSTER_INACTIVE
> commands. This has to be done in GridRestProcessor.authorize method.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
