You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@cassandra.apache.org by Chuck Reynolds <cr...@ancestry.com> on 2017/08/29 21:09:44 UTC

UnauthorizedException: user has no select permissions when quering Cassandra

I’m receiving the following error when quering a table that I know the user has super user rights to.

It only happens about 10% of the time.

com.datastax.driver.core.exceptions.UnauthorizedException: User test has no SELECT permission on <table testtable> or any of its parents.

Re: UnauthorizedException: user has no select permissions when quering Cassandra

Posted by Jeff Jirsa <jj...@gmail.com>.
Double check the replication config for that keyspace, make sure all data centers are spelled properly and there is no extra white space 

-- 
Jeff Jirsa


> On Aug 29, 2017, at 2:49 PM, Chuck Reynolds <cr...@ancestry.com> wrote:
> 
>  
> We have that keyspace replicated to the same number of nodes in the ring.
>  
> Right now I can’t even run select * from system_auth.users without it timeing out.
>  
> From: Akhil Mehra <ak...@gmail.com>
> Reply-To: "user@cassandra.apache.org" <us...@cassandra.apache.org>
> Date: Tuesday, August 29, 2017 at 3:46 PM
> To: user <us...@cassandra.apache.org>
> Subject: Re: UnauthorizedException: user has no select permissions when quering Cassandra
>  
> https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html

Re: UnauthorizedException: user has no select permissions when quering Cassandra

Posted by Chuck Reynolds <cr...@ancestry.com>.
Yes.  We’ve tried them all.

From: Akhil Mehra <ak...@gmail.com>
Reply-To: "user@cassandra.apache.org" <us...@cassandra.apache.org>
Date: Tuesday, August 29, 2017 at 4:06 PM
To: "user@cassandra.apache.org" <us...@cassandra.apache.org>
Subject: Re: UnauthorizedException: user has no select permissions when quering Cassandra

What consistency are you running the query with? Does the query timeout even with a consistency of one?


On 30/08/2017, at 9:49 AM, Chuck Reynolds <cr...@ancestry.com>> wrote:


We have that keyspace replicated to the same number of nodes in the ring.

Right now I can’t even run select * from system_auth.users without it timeing out.

From: Akhil Mehra <ak...@gmail.com>>
Reply-To: "user@cassandra.apache.org<ma...@cassandra.apache.org>" <us...@cassandra.apache.org>>
Date: Tuesday, August 29, 2017 at 3:46 PM
To: user <us...@cassandra.apache.org>>
Subject: Re: UnauthorizedException: user has no select permissions when quering Cassandra

https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html

Re: UnauthorizedException: user has no select permissions when quering Cassandra

Posted by Akhil Mehra <ak...@gmail.com>.
What consistency are you running the query with? Does the query timeout even with a consistency of one?


> On 30/08/2017, at 9:49 AM, Chuck Reynolds <cr...@ancestry.com> wrote:
> 
>  
> We have that keyspace replicated to the same number of nodes in the ring.
>  
> Right now I can’t even run select * from system_auth.users without it timeing out.
>  
> From: Akhil Mehra <akhilmehra@gmail.com <ma...@gmail.com>>
> Reply-To: "user@cassandra.apache.org <ma...@cassandra.apache.org>" <user@cassandra.apache.org <ma...@cassandra.apache.org>>
> Date: Tuesday, August 29, 2017 at 3:46 PM
> To: user <user@cassandra.apache.org <ma...@cassandra.apache.org>>
> Subject: Re: UnauthorizedException: user has no select permissions when quering Cassandra
>  
> https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html <https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html>

Re: UnauthorizedException: user has no select permissions when quering Cassandra

Posted by Chuck Reynolds <cr...@ancestry.com>.
We have that keyspace replicated to the same number of nodes in the ring.

Right now I can’t even run select * from system_auth.users without it timeing out.

From: Akhil Mehra <ak...@gmail.com>
Reply-To: "user@cassandra.apache.org" <us...@cassandra.apache.org>
Date: Tuesday, August 29, 2017 at 3:46 PM
To: user <us...@cassandra.apache.org>
Subject: Re: UnauthorizedException: user has no select permissions when quering Cassandra

https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html

Re: UnauthorizedException: user has no select permissions when quering Cassandra

Posted by Akhil Mehra <ak...@gmail.com>.
I could be that authorisation is added to a node without increasing the replication factor for the system_auth keyspace (https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html <https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html>)

or for some reason the authorisation has not replicated to a particular node.

Cheers,
Akhil
http://abiasforaction.net <http://abiasforaction.net/>



> On 30/08/2017, at 9:09 AM, Chuck Reynolds <cr...@ancestry.com> wrote:
> 
> I’m receiving the following error when quering a table that I know the user has super user rights to.
>  
> It only happens about 10% of the time.
>  
> com.datastax.driver.core.exceptions.UnauthorizedException: User test has no SELECT permission on <table testtable> or any of its parents.