Details
-
New Feature
-
Status: Resolved
-
Normal
-
Resolution: Fixed
-
None
Description
Add a new UNMASK permission allowing users with that permission to see the data masked by the masking functions attached to columns introduced by CASSANDRA-18068, as defined by CEP-20.
It would look like:
> CREATE TABLE patients (
id timeuuid PRIMARY KEY,
name text MASKED WITH default(),
birth date MASKED WITH default()
);
> INSERT INTO patients(id, name, birth) VALUES (now(), 'alice', '1982-12-21');
> CREATE USER unprivileged_user WITH PASSWORD 'xyz';
> CREATE USER privileged_user WITH PASSWORD 'zyx';
> GRANT SELECT ON TABLE patients TO unprivileged_user;
> GRANT SELECT ON TABLE patients TO privileged_user;
> GRANT UNMASK ON TABLE patients TO privileged_user;
> LOGIN unprivileged_user
> SELECT name, birth FROM patients WHERE id=db2b372f-f91b-4537-b46b-c478f8330c29;
name | birth
---------+------------
alXXXXe | 1900-01-01
> LOGIN privileged_user
> SELECT name, birth FROM patients WHERE id=db2b372f-f91b-4537-b46b-c478f8330c29;
name | birth
-------+------------
alice | 1982-12-21
Attachments
Issue Links
- blocks
-
-
- Resolved
-
- is blocked by
-
-
- Resolved
-
-
-
- Resolved
-
