[CASSANDRA-18068] Allow to attach native masking functions to table columns

• Type: New Feature
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: NA
• Component/s: Feature/Dynamic Data Masking
• Epic Link: CEP-20: Dynamic Data Masking
• Change Category: Semantic
• Complexity: Normal
• Platform: All

Source Control Link

PR	CI		trunk	j8 [j11	https://app.circleci.com/pipelines/github/adelapena/cassandra/26

Test and Documentation Plan

New unit and upgrade tests are included

• Assignee: Andres de la Peña
• Reporter: Andres de la Peña

Authors

Andres de la Peña

Reviewers

Benjamin Lerer, Berenguer Blasi

• Created: 23/Nov/22 12:38
• Updated: 06/Mar/23 13:50
• Resolved: 06/Mar/23 13:50

Description

Allow to attach the native masking functions added by CASSANDRA-17941 to table columns, as defined by CEP-20.

CREATE TABLE statements would look like:

> CREATE TABLE patients (
      id timeuuid PRIMARY KEY,
      name text MASKED WITH partial(2, 1),
      birth date MASKED WITH default()
      );
> INSERT INTO patients(id, name, birth) VALUES (now(), 'alice', '1982-12-21);
 
> SELECT name, birth FROM patients;
 
 name    | birth
---------+------------
 alXXXXe | 1900-01-01

ALTER TABLE statements would look like:

> ALTER TABLE patients ALTER name MASKED WITH partial(2, 1);
> ALTER TABLE patients ALTER name WITHOUT MASK;

It won't be possible to use masked columns in the WHERE and IF clauses of SELECT and UPDATE statements.

Issue Links

• blocks: CASSANDRA-18069 Add a new UNMASK permission
• blocks: CASSANDRA-18070 Add a new SELECT_MASKED permission
• blocks: CASSANDRA-18071 Allow to use user-defined functions (UDF) as masking functions
• is blocked by: CASSANDRA-17941 CQL data masking functions