[jira] [Commented] (CASSANDRA-20628) Fix permissions required for modifications on a MV base tables

["Michael Semb Wever (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CASSANDRA-20628?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18108326#comment-18108326 ] 

Michael Semb Wever commented on CASSANDRA-20628:
------------------------------------------------

 
||Branch||Compare||
|{{mck/20628/5.0}}|[https://github.com/apache/cassandra/compare/cassandra-5.0...thelastpickle:cassandra:mck/20628/5.0]|
|dtest {{mck/20628}}|[https://github.com/apache/cassandra-dtest/compare/trunk...thelastpickle:cassandra-dtest:mck/20628]|

The patch deletes the {{View.findAll(..)}} block from {{{}ModificationStatement.authorize(){}}}, so MODIFY on the base table is sufficient. A write no longer requires SELECT on the base table or MODIFY on the view. {{GrantAndRevokeTest}} gains a test for that case. {{NEWS.txt}} carries a 5.0.10 upgrade note, because the change alters observable authorization behaviour.

Deviations from the downstream patches:
 * The dtest version guard is {{{}5.0.10{}}}, not the downstream {{{}4.0{}}}. {{apache/cassandra-dtest}} has one branch for all versions, and 4.0 and 4.1 remain in the version matrix, so the pre-fix expectations stay in the {{else}} arm.

 

> Fix permissions required for modifications on a MV base tables
> --------------------------------------------------------------
>
>                 Key: CASSANDRA-20628
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-20628
>             Project: Apache Cassandra
>          Issue Type: Bug
>          Components: Feature/Materialized Views
>            Reporter: Michael Semb Wever
>            Priority: Normal
>             Fix For: 5.0.x, 7.x
>
>
> MV updates don't require MODIFY permission on views, and don't require SELECT permission on the base table.
> Patches to be based off 
> - 5.0: https://github.com/datastax/cassandra/commit/7e5db99a4915ebd3f14c4ea506a9877f43a3e778
> - dtest: https://github.com/datastax/cassandra-dtest/commit/4b5021ebfa3cd2a744158551105b7ec1a79b4dbe



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org