Details
-
Improvement
-
Status: Resolved
-
Normal
-
Resolution: Fixed
-
None
-
None
-
None
-
Docs
Description
This will be the task that will group all the 3.0 Auth changes, of which we need quite some:
1. Implement Roles (CASSANDRA-7653)
2. Merge ISaslAwareAuthenticator and IAuthenticator, making IAuthenticator SASL-only, and support full SASL capabilities (incl. proxy authentication - see CASSANDRA-7686, CASSANDRA-8068)
3. Remove the current simplistic permissions cache with implementation-specific user/credentials/permissions caches, at least in the implementation we ship with C* (CASSANDRA-7715, CASSANDRA-8194)
4. Consider adding a way to split superuser-ness and the rights to manage users (CASSANDRA-7216, CASSANDRA-8650)
5. Add permissions for types and functions (CASSANDRA-7557)
6. Consider re-introducing the TRUNCATE permission (CASSANDRA-8082)
7. Re-introduce the DESCRIBE permission (CASSANDRA-8163)
Attachments
Issue Links
- contains
-
CASSANDRA-7686 Add proxy authentication to PasswordAuthenticator
- Resolved
-
CASSANDRA-8068 Allow to create authenticator which is aware of the client connection
- Resolved
-
CASSANDRA-8082 Consider re-introducing TRUNCATE permission
- Resolved
-
CASSANDRA-8194 Reading from Auth table should not be in the request path
- Resolved