You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@geode.apache.org by "Swapnil Bawaskar (JIRA)" <ji...@apache.org> on 2017/06/20 22:36:00 UTC

[jira] [Created] (GEODE-3108) secure ability to create lucene indexes

Swapnil Bawaskar created GEODE-3108:
---------------------------------------

             Summary: secure ability to create lucene indexes
                 Key: GEODE-3108
                 URL: https://issues.apache.org/jira/browse/GEODE-3108
             Project: Geode
          Issue Type: Sub-task
          Components: security
            Reporter: Swapnil Bawaskar
            Assignee: Kenneth Howe


Treat queries as a CLUSTER resource so that administrators can control ability to manage indices (both OQL and Lucene), and manage Continuous queries.

Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh commands:
{noformat}
create index
define index
destroy index	
create defined indexes	
close durable-cq	
close durable-client	
clear defined indexes	
create lucene index	
destroy lucene index	
{noformat}
And the following JMX bean methods:
{noformat}
CacheServerMXBean.closeAllContinuousQuery	
CacheServerMXBean.closeContinuousQuery	
DistributedSystemMXBean.setQueryCollectionsDepth	
DistributedSystemMXBean.setQueryResultSetLimit	
{noformat}

A user with CLUSTER:READ:QUERY should be able to run the following commands:
{noformat}
list indexes	
describe lucene index	
list lucene indexes	
{noformat}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)