You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by jj...@apache.org on 2017/08/27 19:57:34 UTC
cassandra git commit: Document Un-revokable Select on System Keyspaces
Repository: cassandra
Updated Branches:
refs/heads/trunk 7bea74b76 -> 68c2d2e6a
Document Un-revokable Select on System Keyspaces
Patch by Russell Spitzer; Reviewed by Jeff Jirsa for CASSANDRA-13184
Project: http://git-wip-us.apache.org/repos/asf/cassandra/repo
Commit: http://git-wip-us.apache.org/repos/asf/cassandra/commit/68c2d2e6
Tree: http://git-wip-us.apache.org/repos/asf/cassandra/tree/68c2d2e6
Diff: http://git-wip-us.apache.org/repos/asf/cassandra/diff/68c2d2e6
Branch: refs/heads/trunk
Commit: 68c2d2e6afc1c0ace103cd1e02e7df7b430f9f4d
Parents: 7bea74b
Author: Russell Spitzer <Ru...@gmail.com>
Authored: Fri Feb 3 10:35:37 2017 -0800
Committer: Jeff Jirsa <jj...@apple.com>
Committed: Sun Aug 27 12:56:51 2017 -0700
----------------------------------------------------------------------
doc/source/cql/security.rst | 9 +++++++++
1 file changed, 9 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/cassandra/blob/68c2d2e6/doc/source/cql/security.rst
----------------------------------------------------------------------
diff --git a/doc/source/cql/security.rst b/doc/source/cql/security.rst
index 9efe27f..ada6517 100644
--- a/doc/source/cql/security.rst
+++ b/doc/source/cql/security.rst
@@ -472,6 +472,15 @@ For instance::
REVOKE EXECUTE ON FUNCTION keyspace1.user_function( int ) FROM report_writer;
REVOKE DESCRIBE ON ALL ROLES FROM role_admin;
+Because of their function in normal driver operations, certain tables cannot have their `SELECT` permissions
+revoked. The following tables will be available to all authorized users regardless of their assigned role::
+
+* `system_schema.keyspaces`
+* `system_schema.columns`
+* `system_schema.tables`
+* `system.local`
+* `system.peers`
+
.. _list-permissions-statement:
LIST PERMISSIONS
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org