natas_hw
/
cassandra
mirror of https://github.com/apache/cassandra
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Document Un-revokable Select on System Keyspaces 

Patch by Russell Spitzer; Reviewed by Jeff Jirsa for CASSANDRA-13184
This commit is contained in:
Russell Spitzer 2017-02-03 10:35:37 -08:00 committed by Jeff Jirsa
parent 7bea74b76b
commit 68c2d2e6af
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
doc/source/cql/security.rst
View File

@ -472,6 +472,15 @@ For instance::
REVOKE EXECUTE ON FUNCTION keyspace1.user_function( int ) FROM report_writer;
REVOKE DESCRIBE ON ALL ROLES FROM role_admin;
Because of their function in normal driver operations, certain tables cannot have their `SELECT` permissions
revoked. The following tables will be available to all authorized users regardless of their assigned role::
* `system_schema.keyspaces`
* `system_schema.columns`
* `system_schema.tables`
* `system.local`
* `system.peers`
.. _list-permissions-statement:
LIST PERMISSIONS