Re: UnauthorizedException: user has no select permissions when quering Cassandra

[Jeff Jirsa]

Double check the replication config for that keyspace, make sure all data 
centers are spelled properly and there is no extra white space 

-- 
Jeff Jirsa


> On Aug 29, 2017, at 2:49 PM, Chuck Reynolds <creyno...@ancestry.com> wrote:
> 
>  
> We have that keyspace replicated to the same number of nodes in the ring.
>  
> Right now I can’t even run select * from system_auth.users without it timeing 
> out.
>  
> From: Akhil Mehra <akhilme...@gmail.com>
> Reply-To: "user@cassandra.apache.org" <user@cassandra.apache.org>
> Date: Tuesday, August 29, 2017 at 3:46 PM
> To: user <user@cassandra.apache.org>
> Subject: Re: UnauthorizedException: user has no select permissions when 
> quering Cassandra
>  
> https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html

Re: UnauthorizedException: user has no select permissions when quering Cassandra

[Chuck Reynolds]

Yes.  We’ve tried them all.

From: Akhil Mehra <akhilme...@gmail.com>
Reply-To: "user@cassandra.apache.org" <user@cassandra.apache.org>
Date: Tuesday, August 29, 2017 at 4:06 PM
To: "user@cassandra.apache.org" <user@cassandra.apache.org>
Subject: Re: UnauthorizedException: user has no select permissions when quering 
Cassandra

What consistency are you running the query with? Does the query timeout even 
with a consistency of one?


On 30/08/2017, at 9:49 AM, Chuck Reynolds 
<creyno...@ancestry.com<mailto:creyno...@ancestry.com>> wrote:


We have that keyspace replicated to the same number of nodes in the ring.

Right now I can’t even run select * from system_auth.users without it timeing 
out.

From: Akhil Mehra <akhilme...@gmail.com<mailto:akhilme...@gmail.com>>
Reply-To: "user@cassandra.apache.org<mailto:user@cassandra.apache.org>" 
<user@cassandra.apache.org<mailto:user@cassandra.apache.org>>
Date: Tuesday, August 29, 2017 at 3:46 PM
To: user <user@cassandra.apache.org<mailto:user@cassandra.apache.org>>
Subject: Re: UnauthorizedException: user has no select permissions when quering 
Cassandra

https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html

Re: UnauthorizedException: user has no select permissions when quering Cassandra

[Akhil Mehra]

What consistency are you running the query with? Does the query timeout even 
with a consistency of one?


> On 30/08/2017, at 9:49 AM, Chuck Reynolds <creyno...@ancestry.com> wrote:
> 
>  
> We have that keyspace replicated to the same number of nodes in the ring.
>  
> Right now I can’t even run select * from system_auth.users without it timeing 
> out.
>  
> From: Akhil Mehra <akhilme...@gmail.com <mailto:akhilme...@gmail.com>>
> Reply-To: "user@cassandra.apache.org <mailto:user@cassandra.apache.org>" 
> <user@cassandra.apache.org <mailto:user@cassandra.apache.org>>
> Date: Tuesday, August 29, 2017 at 3:46 PM
> To: user <user@cassandra.apache.org <mailto:user@cassandra.apache.org>>
> Subject: Re: UnauthorizedException: user has no select permissions when 
> quering Cassandra
>  
> https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html
>  
> <https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html>

Re: UnauthorizedException: user has no select permissions when quering Cassandra

[Chuck Reynolds]

We have that keyspace replicated to the same number of nodes in the ring.

Right now I can’t even run select * from system_auth.users without it timeing 
out.

From: Akhil Mehra <akhilme...@gmail.com>
Reply-To: "user@cassandra.apache.org" <user@cassandra.apache.org>
Date: Tuesday, August 29, 2017 at 3:46 PM
To: user <user@cassandra.apache.org>
Subject: Re: UnauthorizedException: user has no select permissions when quering 
Cassandra

https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html

Re: UnauthorizedException: user has no select permissions when quering Cassandra

[Akhil Mehra]

I could be that authorisation is added to a node without increasing the 
replication factor for the system_auth keyspace 
(https://docs.datastax.com/en/cassandra/3.0/cassandra/configuration/secureConfigInternalAuth.html
 
)

or for some reason the authorisation has not replicated to a particular node.

Cheers,
Akhil
http://abiasforaction.net 



> On 30/08/2017, at 9:09 AM, Chuck Reynolds  wrote:
> 
> I’m receiving the following error when quering a table that I know the user 
> has super user rights to.
>  
> It only happens about 10% of the time.
>  
> com.datastax.driver.core.exceptions.UnauthorizedException: User test has no 
> SELECT permission on  or any of its parents.