Re: What is the safest way to enable authorization?

2019-05-09 Thread Laxmikant Upadhyay
One trick could be : Before enabling authorization 1. Give user1 superuser permission temporarily by logging in with cassandra suer ALTER ROLE user1 with SUPERUSER=true; 2. Enable authorization and grant permission to user1 for specific operation GRANT SELECT ON ALL KEYSPACES TO user1;

Re: What is the safest way to enable authorization?

2019-05-09 Thread Laxmikant Upadhyay
I think you will get below exception while executing GRANT with AllowAllAuthorizer ServerError: java.lang.UnsupportedOperationException: GRANT operation is not supported by AllowAllAuthorizer On Thu, May 9, 2019 at 12:07 PM Devaki, Srinivas wrote: > Hi, > > before changing the configuration f

Re: What is the safest way to enable authorization?

2019-05-08 Thread Devaki, Srinivas
Hi, before changing the configuration from `AllowAllAuthorizer` to `CassandraAuthorizer`, you need to grant enough permissions to the user that allow all the accessed tables by that user. I think that should fix the problem. Thanks On Thu, May 9, 2019 at 12:02 PM Laxmikant Upadhyay wrote: > Le

What is the safest way to enable authorization?

2019-05-08 Thread Laxmikant Upadhyay
Let's say I have a 3 node cluster on 3.11.4 on which authentication is enabled but authorization is disabled. It has one non-super login user 'user1' and default super user 'cassandra' In cassandra.yaml authenticator: PasswordAuthenticator authorizer: AllowAllAuthorizer So to enable authorization