You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Wei Deng (JIRA)" <ji...@apache.org> on 2014/09/06 02:32:28 UTC

[jira] [Commented] (CASSANDRA-7894) Authorization fails occasionally even when user has permission

    [ https://issues.apache.org/jira/browse/CASSANDRA-7894?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14123888#comment-14123888 ] 

Wei Deng commented on CASSANDRA-7894:
-------------------------------------

Could it be a read timeout error on the authorization table? If that's the case, the system.log should show some exceptions.

> Authorization fails occasionally even when user has permission
> --------------------------------------------------------------
>
>                 Key: CASSANDRA-7894
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-7894
>             Project: Cassandra
>          Issue Type: Bug
>            Reporter: Vishy Kasar
>
> Production cluster uses org.apache.cassandra.auth.PasswordAuthenticator and org.apache.cassandra.auth.CassandraAuthorizer. The user has SELECT and MODIFY permissions. 
> cqlsh> list ALL ON ALL KEYSPACES;
>           x_cassandra_user | <all keyspaces> |     SELECT
>           x_cassandra_user | <all keyspaces> |     MODIFY
> Millions of requests from user go through fine. A very small percentage fail with following message sent back to hector client.
> Caused by: me.prettyprint.hector.api.exceptions.HInvalidRequestException: InvalidRequestException(why:User x_cassandra_user has no SELECT permission on <table ks.cf> or any of its parents)
> Any ideas now why this fails? 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)