Return-Path: Delivered-To: apmail-incubator-cassandra-user-archive@minotaur.apache.org Received: (qmail 66017 invoked from network); 1 Dec 2009 23:14:13 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 1 Dec 2009 23:14:13 -0000 Received: (qmail 37848 invoked by uid 500); 1 Dec 2009 23:14:12 -0000 Delivered-To: apmail-incubator-cassandra-user-archive@incubator.apache.org Received: (qmail 37799 invoked by uid 500); 1 Dec 2009 23:14:12 -0000 Mailing-List: contact cassandra-user-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: cassandra-user@incubator.apache.org Delivered-To: mailing list cassandra-user@incubator.apache.org Received: (qmail 37790 invoked by uid 99); 1 Dec 2009 23:14:12 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Dec 2009 23:14:12 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of jbellis@gmail.com designates 74.125.78.147 as permitted sender) Received: from [74.125.78.147] (HELO ey-out-1920.google.com) (74.125.78.147) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 01 Dec 2009 23:14:04 +0000 Received: by ey-out-1920.google.com with SMTP id 26so1222313eyw.8 for ; Tue, 01 Dec 2009 15:13:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:message-id:subject:to:content-type :content-transfer-encoding; bh=rGX7uGmZQp/t60i0RI/FEk7vf515WJFgD1RVNt+3jMc=; b=mJHAjf3P8jZzjCiqSBgivMdfmJhGpY+rGqYn+aT3TZ74wHiWD7CFOjSkxarZWBbmX+ iujVdsjRhahN6PdaPV8ey3D6kJWU8rUsWv+rg+1WD1Kbi9bfo28dfrF4lwBIJx3xPrgJ QnORLj+MhMtRT+P2fweRiq5KEi4Ot8vEh895c= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type:content-transfer-encoding; b=Zv8MvFXrAgwgdYBBQr5MXwHl7UsUkfV1JOBMKRPOYIvN1GzSlC1ckhA9KLlfJHkuL8 iEU57aZHQsoYBDZyT8HcBOYHy/EGCKxWBEeY3XBXN7mRuZo5mIMF6ko5kEM4V5O4pbLi Ie77Om+1DZ3p2xfXl7V3gFmlZJDfahXnGbmGI= MIME-Version: 1.0 Received: by 10.216.91.6 with SMTP id g6mr526373wef.212.1259709224121; Tue, 01 Dec 2009 15:13:44 -0800 (PST) In-Reply-To: <87fx7ul6id.fsf@lifelogs.com> References: <87eio6p7pb.fsf@lifelogs.com> <5B7ECCB8-BF96-4EA1-AAB7-B8C27B824FDF@quagility.com> <87fx8jptkn.fsf@lifelogs.com> <874oozpqcw.fsf@lifelogs.com> <87einfr6a8.fsf@lifelogs.com> <1259699027.19220.37.camel@achilles> <87fx7ul6id.fsf@lifelogs.com> From: Jonathan Ellis Date: Tue, 1 Dec 2009 17:13:24 -0600 Message-ID: Subject: Re: Cassandra access control To: cassandra-user@incubator.apache.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Virus-Checked: Checked by ClamAV on apache.org 2009/12/1 Ted Zlatanov : > I disagree, why would you want to forbid switching the keyspace? =A0That'= s > turning off a currently working feature. =A0Also, connections are not > free, especially across WAN links. It's a currently working feature that (a) only exists in the first place because it was less bad than postponing 0.4 until we could add something like this auth feature, and (b) is of entirely theoretical benefit in the sense that nobody who wants to keep it actually has an app using it, to the best of my knowledge. Let's correct our error, and only add functionality that we know is really needed -- and even then, only if the benefit outweighs the complexity price -- rather than waving our hands and saying "maybe someone will need it, someday." That way leads to clutter and bloat. -Jonathan