geode-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Swapnil Bawaskar (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (GEODE-2923) secure ability to create indexes
Date Tue, 20 Jun 2017 22:38:00 GMT

     [ https://issues.apache.org/jira/browse/GEODE-2923?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Swapnil Bawaskar updated GEODE-2923:
------------------------------------
    Description: 
Treat queries as a CLUSTER resource so that administrators can control ability to manage indices
(both OQL and Lucene), and manage Continuous queries.

Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh commands:
{noformat}
create index
define index
destroy index	
create defined indexes	
close durable-cq	
close durable-client	
clear defined indexes	
{noformat}
And the following JMX bean methods:
{noformat}
CacheServerMXBean.closeAllContinuousQuery	
CacheServerMXBean.closeContinuousQuery	
DistributedSystemMXBean.setQueryCollectionsDepth	
DistributedSystemMXBean.setQueryResultSetLimit	
{noformat}

A user with CLUSTER:READ:QUERY should be able to run the following commands:
{noformat}
list indexes	
{noformat}

  was:
Treat queries as a CLUSTER resource so that administrators can control ability to manage indices
(both OQL and Lucene), and manage Continuous queries.

Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh commands:
{noformat}
create index
define index
destroy index	
create defined indexes	
close durable-cq	
close durable-client	
clear defined indexes	
create lucene index	
destroy lucene index	
{noformat}
And the following JMX bean methods:
{noformat}
CacheServerMXBean.closeAllContinuousQuery	
CacheServerMXBean.closeContinuousQuery	
DistributedSystemMXBean.setQueryCollectionsDepth	
DistributedSystemMXBean.setQueryResultSetLimit	
{noformat}

A user with CLUSTER:READ:QUERY should be able to run the following commands:
{noformat}
list indexes	
describe lucene index	
list lucene indexes	
{noformat}


> secure ability to create indexes
> --------------------------------
>
>                 Key: GEODE-2923
>                 URL: https://issues.apache.org/jira/browse/GEODE-2923
>             Project: Geode
>          Issue Type: Sub-task
>          Components: security
>            Reporter: Swapnil Bawaskar
>            Assignee: Kenneth Howe
>
> Treat queries as a CLUSTER resource so that administrators can control ability to manage
indices (both OQL and Lucene), and manage Continuous queries.
> Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh commands:
> {noformat}
> create index
> define index
> destroy index	
> create defined indexes	
> close durable-cq	
> close durable-client	
> clear defined indexes	
> {noformat}
> And the following JMX bean methods:
> {noformat}
> CacheServerMXBean.closeAllContinuousQuery	
> CacheServerMXBean.closeContinuousQuery	
> DistributedSystemMXBean.setQueryCollectionsDepth	
> DistributedSystemMXBean.setQueryResultSetLimit	
> {noformat}
> A user with CLUSTER:READ:QUERY should be able to run the following commands:
> {noformat}
> list indexes	
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message