Cassandra
  1. Cassandra
  2. CASSANDRA-1554

extend authorization to column families

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Fix Version/s: 0.7 beta 3
    • Component/s: Core
    • Labels:
      None

      Description

      Authorization is now based on a hierarchy of resources, but the hierarchy only extends as far as keyspaces. At the very least, it should be possible to implement an authority that can distinguish between the creation, modification and deletion of column families, and reading and writing the data contained in them.

        Issue Links

          Activity

          Hide
          Stu Hood added a comment -

          Targetting to 0.7.0: CF creation can be dangerous, and RAX needs to be able to lock it down.

          Show
          Stu Hood added a comment - Targetting to 0.7.0: CF creation can be dangerous, and RAX needs to be able to lock it down.
          Hide
          Eric Evans added a comment -

          See attached.

          Show
          Eric Evans added a comment - See attached.
          Hide
          Stu Hood added a comment -
          • I think we need to minimize object creation in ClientState.hasColumnFamilyAccess: this was the intention of the member ArrayList<Object> in ClientState before, but I think it's more important now that it's called for every CF touch. Attaching an 0004 which we can consider in a different issue if you want.

          Thanks for working on this Eric... much appreciated.

          Show
          Stu Hood added a comment - I think we need to minimize object creation in ClientState.hasColumnFamilyAccess: this was the intention of the member ArrayList<Object> in ClientState before, but I think it's more important now that it's called for every CF touch. Attaching an 0004 which we can consider in a different issue if you want. Thanks for working on this Eric... much appreciated.
          Hide
          Eric Evans added a comment -

          committed.

          Show
          Eric Evans added a comment - committed.
          Hide
          Hudson added a comment -

          Integrated in Cassandra #563 (See https://hudson.apache.org/hudson/job/Cassandra/563/)

          Show
          Hudson added a comment - Integrated in Cassandra #563 (See https://hudson.apache.org/hudson/job/Cassandra/563/ )

            People

            • Assignee:
              Eric Evans
              Reporter:
              Eric Evans
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development