Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cassandra.apache.org
Received-SPF: pass (athena.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=thelastpickle.com; h=content-type
	:mime-version:subject:from:in-reply-to:date
	:content-transfer-encoding:message-id:references:to; q=dns; s=
	thelastpickle.com; b=Zj/Qsxa5yIZ51BTNsHEpOfmYp8qUWHMkioSx825LMyc
	Uy42BYERqvu8hvdYjPW6zrJGGxKN8zBNlNMUU9JOFi9jUrGuNqPZWJCsUEOvWv7J
	uX9SndXNTkhLXp8x/eORrNLlCgr2fAb6aC6p5q/zUM96L1s6TRk3kKyBTupno+I8
	=
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1081)
Subject: Re: Privileges
From: aaron morton <aaron@thelastpickle.com>
In-Reply-To: <4C71AEFF.70705@gmail.com>
Date: Mon, 23 Aug 2010 23:39:41 +1200
Content-Transfer-Encoding: quoted-printable
Message-Id: <C2CE66FF-EF9A-4512-91FA-324ACBD8BE66@thelastpickle.com>
References: <4C705F18.60406@gmail.com>
 <AANLkTi=Hb0-QS1AX5JJKgSW-VrJS9cseexHnTPComeht@mail.gmail.com>
 <4C71AEFF.70705@gmail.com>
To: user@cassandra.apache.org

I may try to code a fix for this as it seems like the easiest cassandra =
ticket I could image (and my Java is a little rusty :) )

How about changing the format of the access.properties file to something =
like=20

Keyspace1=3Djsmith:FULL,Elvis Presley:READ,dilbert:READWRITE
=20
If no access level specified default to READWRITE.

Would that be ok ?=20

Aaron


Let me=20
On 23 Aug 2010, at 11:13, Mark wrote:

> On 8/21/10 4:36 PM, Benjamin Black wrote:
>> For reference, I learned this from reading the source:
>> thrift/CassandraServer.java
>>=20
>> On Sat, Aug 21, 2010 at 4:19 PM, Mark<static.void.dev@gmail.com>  =
wrote:
>>>  Is there anyway to remove drop column family/keyspace privileges?
>>>=20
> It seems that SimpleAuthenticator out of box is all or nothing with =
privileges... ie NONE or FULL. Is there a place I can define roles =
and/or readonly accounts? If not I am guessing I will just have to roll =
out my own Authenticator I guess?