Denis Garus created IGNITE-11718:
------------------------------------

             Summary: Authorizing of SERVICE_INVOKE permission
                 Key: IGNITE-11718
                 URL: https://issues.apache.org/jira/browse/IGNITE-11718
             Project: Ignite
          Issue Type: Improvement
    Affects Versions: 2.7
            Reporter: Denis Garus


We authorize SERVICE_INVOKE only once on creation of service instance 
however, we have to authorize SERVICE_INVOKE whenever an operation is invoked 
on the service instance.
If we change some permissions in runtime right after a client got instance, it 
doesn't see those changes.
The scenario:
 * Client A creates a service instance B.
 * Administrator forbids invocation of service B to client A.
 * As long as client A keeps service instance, it can invoke any methods of 
service B.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to