natas_hw
/
cassandra
mirror of https://github.com/apache/cassandra
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

disallow user modification of System keyspace 

patch by Dave Brosius; reviewed by jbellis for CASSANDRA-3759
This commit is contained in:
Jonathan Ellis 2012-01-24 10:14:49 -06:00
parent 23026fdf32
commit 341611095a
2 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGES.txt
View File

@ -1,4 +1,5 @@
1.0.8
* disallow user modification of System keyspace (CASSANDRA-3738)
* allow using sstable2json on secondary index data (CASSANDRA-3738)
* (cqlsh) add DESCRIBE COLUMNFAMILIES (CASSANDRA-3586)
* (cqlsh) format blobs correctly and use colors to improve output

4
src/java/org/apache/cassandra/service/ClientState.java
View File

@ -123,6 +123,10 @@ public class ClientState
{
validateLogin();
// hardcode disallowing messing with system keyspace
if (keyspace.equalsIgnoreCase(Table.SYSTEM_TABLE) && perm == Permission.WRITE)
throw new InvalidRequestException("system keyspace is not user-modifiable");
resourceClear();
Set<Permission> perms = DatabaseDescriptor.getAuthority().authorize(user, resource);