natas_hw
/
cassandra
mirror of https://github.com/apache/cassandra
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update documentation on cassandra integrated auth to show required permissions for nodetool role 

Patch by Valerie Parham-Thompson; Reviewed by Per Otterström for CASSANDRA-14481
This commit is contained in:
Valerie Parham-Thompson 2018-06-20 14:45:35 -04:00 committed by Jeff Jirsa
parent 97ada5bdfd
commit 4f02db5c45
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/source/operating/security.rst
View File

@ -379,6 +379,10 @@ jconsole or jmc in read-only mode would be defined as:
GRANT EXECUTE ON MBEAN 'java.lang:type=Threading' TO jmx;
GRANT EXECUTE ON MBEAN 'com.sun.management:type=HotSpotDiagnostic' TO jmx;
# Grant the role with necessary permissions to use nodetool commands (including nodetool status) in read-only mode
GRANT EXECUTE ON MBEAN 'org.apache.cassandra.db:type=EndpointSnitchInfo' TO jmx;
GRANT EXECUTE ON MBEAN 'org.apache.cassandra.db:type=StorageService' TO jmx;
# Grant the jmx role to one with login permissions so that it can access the JMX tooling
CREATE ROLE ks_user WITH PASSWORD = 'password' AND LOGIN = true AND SUPERUSER = false;
GRANT jmx TO ks_user;