[CASSANDRA-14498] Audit log does not include statements on some system keyspaces

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 4.0-alpha1, 4.0
• Component/s: Feature/Authorization
• Labels: audit lhf security
• Severity: Normal
• Since Version: 4.0
• Assignee: Vinay Chella
• Reporter: Per Otterström

Authors

Vinay Chella

Reviewers

Marcus Eriksson, Per Otterström

• Created: 05/Jun/18 15:36
• Updated: 15/May/20 08:02
• Resolved: 19/Nov/18 11:38

Description

Audit logs does not include statements on the "system" and "system_schema" keyspace.

It may be a common use case to whitelist queries on these keyspaces, but Cassandra should not make assumptions. Users who don't want these statements in their audit log are still able to whitelist them with configuration.