[
https://issues.apache.org/jira/browse/GEODE-2923?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Swapnil Bawaskar updated GEODE-2923:
------------------------------------
Description:
Treat queries as a CLUSTER resource so that administrators can control ability
to manage indices (both OQL and Lucene), and manage Continuous queries.
Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh
commands:
{noformat}
create index
define index
destroy index
create defined indexes
close durable-cq
close durable-client
clear defined indexes
create lucene index
destroy lucene index
{noformat}
And the following JMX bean methods:
{noformat}
CacheServerMXBean.closeAllContinuousQuery
CacheServerMXBean.closeContinuousQuery
DistributedSystemMXBean.setQueryCollectionsDepth
DistributedSystemMXBean.setQueryResultSetLimit
{noformat}
A user with CLUSTER:READ:QUERY should be able to run the following commands:
{noformat}
list indexes
describe lucene index
list lucene indexes
{noformat}
was:
Treat queries as a CLUSTER resource so that administrators can control ability
to manage indices (both OQL and Lucene), and manage Continuous queries.
Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh
commands:
{noformat}
create index
define index
destroy index
create defined indexes
close durable-cq
close durable-client
clear defined indexes
create lucene index
destroy lucene index
{noformat}
And the following JMX bean methods:
{noformat}
CacheServerMXBean.closeAllContinuousQuery
CacheServerMXBean.closeContinuousQuery
DistributedSystemMXBean.setQueryCollectionsDepth
DistributedSystemMXBean.setQueryResultSetLimit
{noformat}
> secure ability to create indexes
> --------------------------------
>
> Key: GEODE-2923
> URL: https://issues.apache.org/jira/browse/GEODE-2923
> Project: Geode
> Issue Type: Sub-task
> Components: security
> Reporter: Swapnil Bawaskar
>
> Treat queries as a CLUSTER resource so that administrators can control
> ability to manage indices (both OQL and Lucene), and manage Continuous
> queries.
> Only a user with CLUSTER:MANAGE:QUERY should be able to run the following
> gfsh commands:
> {noformat}
> create index
> define index
> destroy index
> create defined indexes
> close durable-cq
> close durable-client
> clear defined indexes
> create lucene index
> destroy lucene index
> {noformat}
> And the following JMX bean methods:
> {noformat}
> CacheServerMXBean.closeAllContinuousQuery
> CacheServerMXBean.closeContinuousQuery
> DistributedSystemMXBean.setQueryCollectionsDepth
> DistributedSystemMXBean.setQueryResultSetLimit
> {noformat}
> A user with CLUSTER:READ:QUERY should be able to run the following commands:
> {noformat}
> list indexes
> describe lucene index
> list lucene indexes
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
