Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Modeling » EMF » [CDO] Security manager failing in 'mem' store configuration ?
[CDO] Security manager failing in 'mem' store configuration ? [message #1401944] Wed, 16 July 2014 09:33 Go to next message
Laurent Le Moux is currently offline Laurent Le MouxFriend
Messages: 184
Registered: September 2011
Senior Member
Hi all,

After using a pre-Luna version of Eclipse Modeling and CDO 4.3, I just downloaded the official bundle 2 days ago.

I then built together again a CDO server as standalone application.
The security manager works just fine with a 'dbstore' configuration based on the default H2.
But it (partially) fails with a 'memstore' configuration.
A couple of seconds after startup, I get an exception about a invalid 'cdo://repo1/security' URI (see attachments).

Using the CDO explorer, I can however connect as Administrator and see the 'security' resource and its content. But I can't commit any modification.
Moreover, the /home and /home/Administrator directories are missing.

Kind regards,

Laurent
Re: [CDO] Security manager failing in 'mem' store configuration ? [message #1401951 is a reply to message #1401944] Wed, 16 July 2014 09:40 Go to previous messageGo to next message
Esteban Dugueperoux is currently offline Esteban DugueperouxFriend
Messages: 472
Registered: July 2009
Senior Member
Hi Laurent,

The security feature of CDO cannot be used with MEMStore because after a
security model change, the server must be restarted to use the new
security model.

Best Regards.

Le 16/07/2014 11:33, Laurent Le Moux a écrit :
> Hi all,
>
> After using a pre-Luna version of Eclipse Modeling and CDO 4.3, I just downloaded the official bundle 2 days ago.
>
> I then built together again a CDO server as standalone application.
> The security manager works just fine with a 'dbstore' configuration based on the default H2.
> But it (partially) fails with a 'memstore' configuration.
> A couple of seconds after startup, I get an exception about a invalid 'cdo://repo1/security' URI (see attachments).
>
> Using the CDO explorer, I can however connect as Administrator and see the 'security' resource and its content. But I can't commit any modification.
> Moreover, the /home and /home/Administrator directories are missing.
>
> Kind regards,
>
> Laurent
>
Re: [CDO] Security manager failing in 'mem' store configuration ? [message #1402194 is a reply to message #1401951] Wed, 16 July 2014 17:13 Go to previous messageGo to next message
Laurent Le Moux is currently offline Laurent Le MouxFriend
Messages: 184
Registered: September 2011
Senior Member
Hi Esteban,

Thank you for your reply and sorry for the three same topics but something went wrong when I first tried to create them...

However, your answer surprises me because I was using a pre-release of Eclipse Modeling Luna with CDO 4.3 during a couple of months now. And the security manager used to work just fine, including with a MEMStore configuration... Which is fairly useful for unit tests...

Moreover, I didn't have to restart the server when modifying the security settings (like creating permissions, groups and users). Which, by the way, sounds to me like quite unacceptable for operational use...

As these problems disappear with a DBStore configuration, I was wondering if this could just be a regression ?

Regards,

Laurent
Re: [CDO] Security manager failing in 'mem' store configuration ? [message #1402577 is a reply to message #1402194] Thu, 17 July 2014 07:16 Go to previous messageGo to next message
Esteban Dugueperoux is currently offline Esteban DugueperouxFriend
Messages: 472
Registered: July 2009
Senior Member
Perhaps using the
org.eclipse.emf.cdo.server.internal.security.SecurityManagerCommand from
the OSGI console as it use RealmOperation to update the security model,
you don't need CDO server restart. But when we have tested with CDO
4.2/4.3, updating the security model using CDOTransaction, the CDO
server restart was needed to have new permissions taken into account.

Best Regards.

Le 16/07/2014 19:13, Laurent Le Moux a écrit :
> Hi Esteban,
>
> Thank you for your reply and sorry for the three same topics but
> something went wrong when I first tried to create them...
>
> However, your answer surprises me because I was using a pre-release of
> Eclipse Modeling Luna with CDO 4.3 during a couple of months now. And
> the security manager used to work just fine, including with a MEMStore
> configuration... Which is fairly useful for unit tests...
>
> Moreover, I didn't have to restart the server when modifying the
> security settings (like creating permissions, groups and users). Which,
> by the way, sounds to me like quite unacceptable for operational use...
>
> As these problems disappear with a DBStore configuration, I was
> wondering if this could just be a regression ?
>
> Regards,
>
> Laurent
Re: [CDO] Security manager failing in 'mem' store configuration ? [message #1402846 is a reply to message #1402577] Thu, 17 July 2014 20:07 Go to previous message
Laurent Le Moux is currently offline Laurent Le MouxFriend
Messages: 184
Registered: September 2011
Senior Member
Hi Esteban,

I'm not using any internal security manager command...

The behavior you describe does not apply to a DBStore configuration.

And, as said before, I can not imagine users would accept to restart a unix or windows system running critical applications just because they change users, groups, permissions or any other security related settings. So I assume reasonable to believe they wouldn't either for a CDO server...

And last but not the least Wink, I get the invalid URI exception at server startup, even before I got the chance to change any security settings...

So I really expect the cause of the problem to be something else...
And I just opened the following entry in bugzilla :
https://bugs.eclipse.org/bugs/show_bug.cgi?id=439841

Kind regards,

Laurent
Previous Topic:[CDO] - Not compatible with mySql 5.6 ?
Next Topic:[cdo] Containment always has 0 as its cdo_resource
Goto Forum:
  


Current Time: Thu Apr 18 07:35:03 GMT 2024

Powered by FUDForum. Page generated in 0.02788 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top