Hi list,

I would like to propose CEP-55. It is about the ability to create users /
roles without specifying names ourselves.

This is a very handy feature for systems where we want to have a way for
the system to generate user names / role names for us by some predefined
manner. If there is a company deploying clusters in some automated manner /
on demand, the creation of user names / roles is left to an operator to
figure out. This task can be delegated to cluster and user name / role name
would be returned as part of CQL response.

This feature might be also used e.g. for demo / evaluation purposes, for
creation of technical users where role names do not matter, or for
increased security where role names would not be leaked in logs.

This is quite a powerful technique, especially with CEP-24 / password
generation, where an operator just has to execute:

CREATE GENERATED USER WITH GENERATED PASSWORD;

and both (valid) name and password would be returned.

(1)
https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-55+Generated+role+names

Reply via email to