geode-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (GEODE-3578) Creating and closing a cq from a client should only require DATA:READ
Date Tue, 26 Sep 2017 18:20:00 GMT

    [ https://issues.apache.org/jira/browse/GEODE-3578?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16181267#comment-16181267
] 

ASF subversion and git services commented on GEODE-3578:
--------------------------------------------------------

Commit fb0c28316d4337efb57610b0ee8c0febe7f649d5 in geode's branch refs/heads/develop from
Karen Miller
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=fb0c283 ]

GEODE-3578 Revise docs for CQ authorization level change (#818)



> Creating and closing a cq from a client should only require DATA:READ
> ---------------------------------------------------------------------
>
>                 Key: GEODE-3578
>                 URL: https://issues.apache.org/jira/browse/GEODE-3578
>             Project: Geode
>          Issue Type: Bug
>          Components: cq, docs, security
>            Reporter: Jason Huynh
>            Assignee: Karen Smoler Miller
>              Labels: 1.3
>             Fix For: 1.3.0
>
>
> A client should not be required to have CLUSTER:MANAGE:QUERY to create a cq.  Otherwise,
we would be giving clients the ability to create/drop indexes as a side effect of wanting
to allow them to create a cq.
> Instead a client creating a cq should require just DATA:READ.  The client should also
be able to close their own cq, therefore only needing DATA:READ for that.
> However an admin should be able to close cq's.  They may not have DATA:READ. 



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message