[CASSANDRA-7653] Add role based access control to Cassandra

• Type: Sub-task
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 2.2.0 beta 1
• Component/s: Legacy/CQL, Legacy/Distributed Metadata
• Labels: security
• Impacts: Docs
• Assignee: Sam Tunnicliffe
• Reporter: Mike Adamson

Authors

Sam Tunnicliffe

Reviewers

Aleksey Yeschenko

• Tester: Philip Thompson
• Created: 31/Jul/14 11:07
• Updated: 06/Nov/19 22:04
• Resolved: 14/Jan/15 19:51

Description

The current authentication model supports granting permissions to individual users. While this is OK for small or medium organizations wanting to implement authorization, it does not work well in large organizations because of the overhead of having to maintain the permissions for each user.

Introducing roles into the authentication model would allow sets of permissions to be controlled in one place as a role and then the role granted to users. Roles should also be able to be granted to other roles to allow hierarchical sets of permissions to be built up.

Issue Links

• relates to: CASSANDRA-7558 Document users and permissions in CQL docs