[CASSANDRA-5144] Validate login for Thrift describe_keyspace, describe_keyspaces and set_keyspace methods

• Type: Bug
• Status: Resolved
• Priority: Low
• Resolution: Fixed
• Fix Version/s: 1.2.1
• Severity: Low
• Assignee: Aleksey Yeschenko
• Reporter: Aleksey Yeschenko

Authors

Aleksey Yeschenko

Reviewers

Jonathan Ellis

• Created: 10/Jan/13 21:47
• Updated: 16/Apr/19 09:32
• Resolved: 11/Jan/13 00:06

Description

Not validating login leaks info about keyspaces and columnfamilies if the configured authenticator requires validation.

This change does not affect AllowAllAuthenticator, but if an implementation forbids anonymous access, we should deny this information to unauthenticated users.