[CASSANDRA-5963] Require superuser status for adding triggers - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Low
Resolution: Fixed
Fix Version/s: 2.0.1
Component/s: None
Labels:
- security
- triggers

Description

You can do anything from within ITrigger.augment(), bypassing any authorization checks. The only fix is to require superuser status for CREATE TRIGGER and CF updates via Thrift that involve triggers.

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

5963.txt
04/Sep/13 06:23
8 kB
Aleksey Yeschenko

Activity

People

Assignee:: Aleksey Yeschenko

Reporter:: Aleksey Yeschenko

Authors:: Aleksey Yeschenko

Reviewers:: Jonathan Ellis

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 30/Aug/13 22:50

Updated:: 16/Apr/19 09:32

Resolved:: 04/Sep/13 18:55