NIFI-3133: Ensure correct checks against Remote Group Ports#1297
NIFI-3133: Ensure correct checks against Remote Group Ports#1297mcgilman wants to merge 9 commits intoapache:masterfrom
Conversation
mcgilman
commented
Dec 5, 2016
- Ensuring that Remote Group Ports are always authorized according to their Remote Process Group.
- Ensuring that Remote Group Ports are always authorized according to their Remote Process Group.
- Using getSourceAuthorizable() when accessing flow files and content.
|
Reviewing |
- Decouple local and remote connectable's to avoid ambiguity with self referencing RPGs.
|
|
||
| final RemoteGroupPort remoteGroupPort = getRootGroup().findRemoteGroupPort(remoteGroupPortId); | ||
| if (remoteGroupPort == null) { | ||
| throw new ResourceNotFoundException("The component that generated this event is no longer part of the data flow."); |
There was a problem hiding this comment.
I think there is a bit of copy paste error with this Exception message. My understanding is that this method is not limited to an "event".
There was a problem hiding this comment.
With the refactoring it is just events. However, there is still one spot that is unused that can now be removed. I'll update.
| } | ||
|
|
||
| final RemoteGroupPort remoteGroupPort = root.findRemoteGroupPort(dto.getComponentId()); | ||
| if (connectable != null) { |
There was a problem hiding this comment.
Looks like a copy/paste error, this should check "remoteGroupPort"
- Addressing comments from the PR.
- Fixed check verifying source/destination when creating a connection.
- Only showing the go to link when the source component is not a remote port.
- Removing unnecessary checking of remote group port authorization since it's handled by the parent RPG.
- Fixing issue showing the connection details dialog when the source component is a RPG.
- Ensuring the local connectable was found.
|
+1 Visually verified code and did a contrib-check build. In a secure 3 node cluster ran through a number of tests involving RPGs, Input/Output ports and policies. I also ran a standalone instance to verify nothing there regressed. Everything worked as expected. Thanks @mcgilman I will squash and merge. |
…ccording to their Remote Process Group. NIFI-3133: - Using getSourceAuthorizable() when accessing flow files and content. NIFI-3133: - Decouple local and remote connectable's to avoid ambiguity with self referencing RPGs. NIFI-3133: - Addressing comments from the PR. NIFI-3133: - Fixed check verifying source/destination when creating a connection. NIFI-3133: - Only showing the go to link when the source component is not a remote port. NIFI-3133: - Removing unnecessary checking of remote group port authorization since it's handled by the parent RPG. NIFI-3133: - Fixing issue showing the connection details dialog when the source component is a RPG. NIFI-3133: - Ensuring the local connectable was found. This closes apache#1297 Signed-off-by: jpercivall <JPercivall@apache.org>
…ccording to their Remote Process Group. NIFI-3133: - Using getSourceAuthorizable() when accessing flow files and content. NIFI-3133: - Decouple local and remote connectable's to avoid ambiguity with self referencing RPGs. NIFI-3133: - Addressing comments from the PR. NIFI-3133: - Fixed check verifying source/destination when creating a connection. NIFI-3133: - Only showing the go to link when the source component is not a remote port. NIFI-3133: - Removing unnecessary checking of remote group port authorization since it's handled by the parent RPG. NIFI-3133: - Fixing issue showing the connection details dialog when the source component is a RPG. NIFI-3133: - Ensuring the local connectable was found. This closes apache#1297 Signed-off-by: jpercivall <JPercivall@apache.org>
…ccording to their Remote Process Group. NIFI-3133: - Using getSourceAuthorizable() when accessing flow files and content. NIFI-3133: - Decouple local and remote connectable's to avoid ambiguity with self referencing RPGs. NIFI-3133: - Addressing comments from the PR. NIFI-3133: - Fixed check verifying source/destination when creating a connection. NIFI-3133: - Only showing the go to link when the source component is not a remote port. NIFI-3133: - Removing unnecessary checking of remote group port authorization since it's handled by the parent RPG. NIFI-3133: - Fixing issue showing the connection details dialog when the source component is a RPG. NIFI-3133: - Ensuring the local connectable was found. This closes #1297 Signed-off-by: jpercivall <JPercivall@apache.org>