Hello,

With the setup explained in
https://cwiki.apache.org/confluence/display/GEODE/Using+Custom+SecurityManager,
observed following,

Started locator, server as explained in doc.

gfsh>connect --locators=localhost[10334] --user=super-user
--password=1234567
Connecting to Locator at [host=localhost, port=10334] ..
Connecting to Manager at [host=192.168.3.125, port=1099] ..
Successfully connected to: [host=192.168.3.125, port=1099]

gfsh>list members
Name | Id
---- | --------------------------------------------
l1   | 192.168.3.125(l1:23399:locator)<ec><v0>:1024
s1   | 192.168.3.125(s1:23597)<v3>:1025

gfsh>list regions
Unauthorized. Reason : super-user not authorized for DATA:READ

gfsh>create region --name=region1 --type=PARTITION
Unauthorized. Reason : super-user not authorized for DATA:MANAGE

gfsh>

Why "list regions" and "create region" are Unauthorized, even though, as we
see in security.json, user "super-user" has a role "data", which is mapped
to permissions ("DATA:MANAGE", "DATA:WRITE", "DATA:READ").

Am i missing something here...?
Nilkanth.

Reply via email to