Denis Garus created IGNITE-11718:
------------------------------------
Summary: Authorizing of SERVICE_INVOKE permission
Key: IGNITE-11718
URL:
https://issues.apache.org/jira/browse/IGNITE-11718 Project: Ignite
Issue Type: Improvement
Affects Versions: 2.7
Reporter: Denis Garus
We authorize SERVICE_INVOKE only once on creation of service instance
however, we have to authorize SERVICE_INVOKE whenever an operation is invoked on the service instance.
If we change some permissions in runtime right after a client got instance, it doesn't see those changes.
The scenario:
* Client A creates a service instance B.
* Administrator forbids invocation of service B to client A.
* As long as client A keeps service instance, it can invoke any methods of service B.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)