cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Aleksey Yeschenko (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CASSANDRA-8163) Re-introduce DESCRIBE permission
Date Tue, 19 May 2015 12:12:01 GMT

    [ https://issues.apache.org/jira/browse/CASSANDRA-8163?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14550333#comment-14550333
] 

Aleksey Yeschenko commented on CASSANDRA-8163:
----------------------------------------------

Can we, for 2.2, just introduce the permission to the enum, and have it be a no-op?

I don't want us to break the API again in 3.0.

> Re-introduce DESCRIBE permission
> --------------------------------
>
>                 Key: CASSANDRA-8163
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-8163
>             Project: Cassandra
>          Issue Type: Improvement
>            Reporter: Vishy Kasar
>            Priority: Minor
>             Fix For: 3.x
>
>
> We have a cluster like this:
> project1_keyspace
> table101
> table102
> project2_keyspace
> table201
> table202
> We have set up following users and grants:
> project1_user has all access to project1_keyspace 
> project2_user has all access to project2_keyspace
> However project1_user can still do a 'describe schema' and get the schema for project2_keyspace
as well. We do not want project1_user to have any knowledge for project2 in any way (cqlsh/java-driver
etc) .



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message