CODEWITHSUNDEEP
cassandracassandra-2.0cassandra-3.0scylla
LetsNoSQL
LetsNoSQL

Reputation: 1538

User can view specfic keyspace not others if not admin rights?

While exploring cassandra, Is it possible in cassandra that if I created an user "test" and I have multiple keypsaces so if I am logging cqlsh with "test" then I can see only selected keyspaces not others.admin can view or switch all keypsaces. please help if any idea or correct me.

Thanks in advance.

Upvotes: 0

Views: 724

Answers (2)

TomerSan
TomerSan

Reputation: 1578

Permissions (Data Control)

https://docs.scylladb.com/operating-scylla/security/authorization/#data-control

Permission     Resource     Operations
AUTHORIZE   ALL KEYSPACES   GRANT PERMISSION and REVOKE PERMISSION on any table
AUTHORIZE      KEYSPACE     GRANT PERMISSION and REVOKE PERMISSION on any table in specified keyspace
AUTHORIZE        TABLE      GRANT PERMISSION and REVOKE PERMISSION on specified table

GRANT permissions

https://docs.scylladb.com/operating-scylla/security/authorization/#grant-permission

AND / OR

RBAC (Role Based Access Control)

https://docs.scylladb.com/operating-scylla/security/authorization/#database-roles

Will be a good way of accomplishing what you are aiming for

Upvotes: 4

undefined_variable
undefined_variable

Reputation: 6218

GRANT command should work. Though test user will be able to see other keyspaces, operation will not be possible unless given permission. If test user has SELECT grant on particular keyspace it will be able to only issue select query on tables in that keyspace.

https://docs.datastax.com/en/cql/3.3/cql/cql_reference/cqlGrant.html

Upvotes: 1

Related Questions