[CASSANDRA-8303] Create a capability limitation framework

• Type: Improvement
• Status: Open
• Priority: Normal
• Resolution: Unresolved
• Fix Version/s: 5.x
• Component/s: Legacy/Distributed Metadata
• Assignee: Unassigned
• Reporter: Anupam Arora
• Created: 12/Nov/14 21:30
• Updated: 21/Aug/23 12:25

Description

In addition to our current Auth framework that acts as a white list, and regulates access to data, functions, and roles, it would be beneficial to have a different, capability limitation framework, that would be orthogonal to Auth, and would act as a blacklist.

Example uses:

• take away the ability to TRUNCATE from all users but the admin (TRUNCATE itself would still require MODIFY permission)
• take away the ability to use ALLOW FILTERING from all users but Spark/Hadoop (SELECT would still require SELECT permission)
• take away the ability to use UNLOGGED BATCH from everyone (the operation itself would still require MODIFY permission)
• take away the ability to use certain consistency levels (make certain tables LWT-only for all users, for example)

Original description:
Please provide a "strict mode" option in cassandra that will kick out any CQL queries that are expensive, e.g. any query with ALLOWS FILTERING, multi-partition queries, secondary index queries, etc.

Issue Links

• is duplicated by: CASSANDRA-8754 Required consistency level
• is duplicated by: CASSANDRA-8082 Consider re-introducing TRUNCATE permission
• is duplicated by: CASSANDRA-8828 Counter of ALLOW FILTERING queries
• is duplicated by: CASSANDRA-8957 Move TRUNCATE from MODIFY to DROP permission group
• is duplicated by: CASSANDRA-9106 disable secondary indexes by default
• is duplicated by: CASSANDRA-11012 Allow tracing CQL of a specific client only, based on IP (range)
• is related to: CASSANDRA-6559 cqlsh should warn about ALLOW FILTERING
• is related to: CASSANDRA-10444 Create an option to forcibly disable tracing
• is related to: CASSANDRA-9106 disable secondary indexes by default
• relates to: CASSANDRA-15775 Configuration to disallow queries with "allow filtering"
• relates to: CASSANDRA-9282 Warn on unlogged batches
• links to: Design doc
• links to: Design Doc (Confluence)