You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@cassandra.apache.org by Mark <st...@gmail.com> on 2010/08/22 01:19:52 UTC
Privileges
Is there anyway to remove drop column family/keyspace privileges?
Re: Privileges
Posted by Benjamin Black <b...@b3k.us>.
No.
On Sat, Aug 21, 2010 at 4:19 PM, Mark <st...@gmail.com> wrote:
> Is there anyway to remove drop column family/keyspace privileges?
>
Re: Privileges
Posted by Benjamin Black <b...@b3k.us>.
My mistake, the access levels in 0.7 do now distinguish these
operations (at access level FULL).
On Sat, Aug 21, 2010 at 4:19 PM, Mark <st...@gmail.com> wrote:
> Is there anyway to remove drop column family/keyspace privileges?
>
Re: Privileges
Posted by Aaron Morton <aa...@thelastpickle.com>.
Scratch that, looks like a fix is on it's way...
https://issues.apache.org/jira/browse/CASSANDRA-1237 for 0.8 and
https://issues.apache.org/jira/browse/CASSANDRA-1271 for 0.7
Aaron
On 23 Aug, 2010,at 11:39 PM, aaron morton <aa...@thelastpickle.com> wrote:
I may try to code a fix for this as it seems like the easiest cassandra ticket I could image (and my Java is a little rusty :) )
How about changing the format of the access.properties file to something like
Keyspace1=jsmith:FULL,Elvis Presley:READ,dilbert:READWRITE
If no access level specified default to READWRITE.
Would that be ok ?
Aaron
Let me
On 23 Aug 2010, at 11:13, Mark wrote:
> On 8/21/10 4:36 PM, Benjamin Black wrote:
>> For reference, I learned this from reading the source:
>> thrift/CassandraServer.java
>>
>> On Sat, Aug 21, 2010 at 4:19 PM, Mark<st...@gmail.com> wrote:
>>> Is there anyway to remove drop column family/keyspace privileges?
>>>
> It seems that SimpleAuthenticator out of box is all or nothing with privileges... ie NONE or FULL. Is there a place I can define roles and/or readonly accounts? If not I am guessing I will just have to roll out my own Authenticator I guess?
Re: Privileges
Posted by aaron morton <aa...@thelastpickle.com>.
I may try to code a fix for this as it seems like the easiest cassandra ticket I could image (and my Java is a little rusty :) )
How about changing the format of the access.properties file to something like
Keyspace1=jsmith:FULL,Elvis Presley:READ,dilbert:READWRITE
If no access level specified default to READWRITE.
Would that be ok ?
Aaron
Let me
On 23 Aug 2010, at 11:13, Mark wrote:
> On 8/21/10 4:36 PM, Benjamin Black wrote:
>> For reference, I learned this from reading the source:
>> thrift/CassandraServer.java
>>
>> On Sat, Aug 21, 2010 at 4:19 PM, Mark<st...@gmail.com> wrote:
>>> Is there anyway to remove drop column family/keyspace privileges?
>>>
> It seems that SimpleAuthenticator out of box is all or nothing with privileges... ie NONE or FULL. Is there a place I can define roles and/or readonly accounts? If not I am guessing I will just have to roll out my own Authenticator I guess?
Re: Privileges
Posted by Mark <st...@gmail.com>.
On 8/21/10 4:36 PM, Benjamin Black wrote:
> For reference, I learned this from reading the source:
> thrift/CassandraServer.java
>
> On Sat, Aug 21, 2010 at 4:19 PM, Mark<st...@gmail.com> wrote:
>> Is there anyway to remove drop column family/keyspace privileges?
>>
It seems that SimpleAuthenticator out of box is all or nothing with
privileges... ie NONE or FULL. Is there a place I can define roles
and/or readonly accounts? If not I am guessing I will just have to roll
out my own Authenticator I guess?
Re: Privileges
Posted by Benjamin Black <b...@b3k.us>.
For reference, I learned this from reading the source:
thrift/CassandraServer.java
On Sat, Aug 21, 2010 at 4:19 PM, Mark <st...@gmail.com> wrote:
> Is there anyway to remove drop column family/keyspace privileges?
>