cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Philip Thompson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CASSANDRA-8213) Grant Permission fails if permission had been revoked previously
Date Wed, 29 Oct 2014 18:08:35 GMT

    [ https://issues.apache.org/jira/browse/CASSANDRA-8213?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14188709#comment-14188709
] 

Philip Thompson commented on CASSANDRA-8213:
--------------------------------------------

grant_revoke_cleanup_test is having the exact same issue but with creating and dropping a
user. After dropping a user, recreating the user shows no changes in the system_auth.user
folder

> Grant Permission fails if permission had been revoked previously
> ----------------------------------------------------------------
>
>                 Key: CASSANDRA-8213
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-8213
>             Project: Cassandra
>          Issue Type: Bug
>            Reporter: Philip Thompson
>             Fix For: 2.1.2
>
>
> The dtest auth_test.py:TestAuth.alter_cf_auth_test is failing. 
> {code}
>         cassandra.execute("GRANT ALTER ON ks.cf TO cathy")
>         cathy.execute("ALTER TABLE ks.cf ADD val int")
>         cassandra.execute("REVOKE ALTER ON ks.cf FROM cathy")
>         self.assertUnauthorized("User cathy has no ALTER permission on <table ks.cf>
or any of its parents",
>                                 cathy, "CREATE INDEX ON ks.cf(val)")
>         cassandra.execute("GRANT ALTER ON ks.cf TO cathy")
>         cathy.execute("CREATE INDEX ON ks.cf(val)")
> {code}
> In this section of code, the user cathy is granted "ALTER" permissions on 'ks.cf', then
they are revoked, then granted again. Monitoring system_auth.permissions during this section
of code show that the permission is added with the initial grant, and revoked properly, but
the table remains empty after the second grant.
> When the cathy user attempts to create an index, the following exception is thrown:
> {code}
> Unauthorized: code=2100 [Unauthorized] message="User cathy has no ALTER permission on
<table ks.cf> or any of its parents"
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message