[jira] [Created] (CASSSIDECAR-252) Use List roles statement to check for super user status

["Saranya Krishnakumar (Jira)" <ji...@apache.org>]

Saranya Krishnakumar created CASSSIDECAR-252:
------------------------------------------------

             Summary: Use List roles statement to check for super user status
                 Key: CASSSIDECAR-252
                 URL: https://issues.apache.org/jira/browse/CASSSIDECAR-252
             Project: Sidecar for Apache Cassandra
          Issue Type: Bug
            Reporter: Saranya Krishnakumar


For role based access control, we currently use 'SELECT role, is_superuser FROM system_auth.roles’ to retrieve super user roles. Super user roles have admin privileges in Sidecar. ‘is_superuser’ does not return true when role holds other roles with super user status. It does not consider transitive super user status. Hence we need to do something similar to what is done in cassandra, use 'LIST ROLES' statement instead for retrieving super user status. 'LIST ROLES' lists all roles that belong to given role, we then return return super user status for given role if any of the child roles have super user status.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org