A Question about authorize method of IAuthority

2011-01-31 Thread indika kumara
Hi All, Currently, there are two permissions - read and write, and there is no way to know the current operation being performed such as add, update, etc. If the operation is 'add', as the user is already logged into the system, I would like to authorize the user for the resource going to add. I

Re: A Question about authorize method of IAuthority

2011-01-31 Thread indika kumara
probably be a larger patch than you think. On Mon, Jan 31, 2011 at 1:54 AM, indika kumara ind...@apache.org wrote: Hi All, Currently, there are two permissions - read and write, and there is no way to know the current operation being performed such as add, update, etc. If the operation is 'add

In the ‘Cassandra.Iface’ interface, is it correct to call ‘void set_keyspace()’ prior to ‘login()’?

2011-01-30 Thread indika kumara
Hi All, I observed the behavior indicated in the subject of this email even the ‘default User’ returned from authentication is null. Is this correct? Thanks, Indika

Re: In the ‘Cassandra.Iface’ interface, is it correct to call ‘void set_keyspace()’ prior to ‘login()’?

2011-01-30 Thread indika kumara
appreciate the suggestions for implementing the aforementioned idea listed in the wiki. Thanks, Indika On Sun, Jan 30, 2011 at 10:21 PM, indika kumara ind...@apache.org wrote: Hi All, I observed the behavior indicated in the subject of this email even the ‘default User’ returned from

Re: In the ‘Cassandra.Iface’ interface, is it correct to call ‘void set_keyspace()’ prior to ‘login()’?

2011-01-30 Thread indika kumara
on the ClientState. Then your client would not need to call set_keyspace() . The keyspace has to exist though, it's used it lots of places to identify the CF Hope that helps. Aaron On 31 Jan, 2011,at 07:18 AM, indika kumara indika.k...@gmail.com wrote: This issue came when I was trying

Re: In the ‘Cassandra.Iface’ interface, is it correct to call ‘void set_keyspace()’ prior to ‘login()’?

2011-01-30 Thread indika kumara
it in the login() function on the ClientState. Then your client would not need to call set_keyspace() . The keyspace has to exist though, it's used it lots of places to identify the CF Hope that helps. Aaron On 31 Jan, 2011,at 07:18 AM, indika kumara indika.k...@gmail.com wrote: This issue

The authorize method of IAuthority

2011-01-21 Thread indika kumara
Hi All, Shouldn't the existing method be changed to the following? public boolean authorize(AuthenticatedUser user, ListObject resource, Permission permission); // checks the authority for a given user for a given resource for a given permission The existing method: public EnumSetPermission

Re: The authorize method of IAuthority

2011-01-21 Thread indika kumara
Thanks Eric for the clarification. On Fri, Jan 21, 2011 at 11:11 PM, Eric Evans eev...@rackspace.com wrote: On Fri, 2011-01-21 at 22:45 +0600, indika kumara wrote: Shouldn't the existing method be changed to the following? public boolean authorize(AuthenticatedUser user, ListObject

Re: Multi-tenancy, and authentication and authorization

2011-01-20 Thread indika kumara
behavior on the CF level will be stopped at the keyspace and server level before doing any damage.) I don't think Cassandra needs to know about end-users. From Cassandra's point of view the tenant is the user. On Thu, Jan 20, 2011 at 7:00 AM, indika kumara indika.k...@gmail.comwrote: +1

Re: Multi-tenancy, and authentication and authorization

2011-01-20 Thread indika kumara
before even though it will be built on averages which probably are no so fine-grained but it can provide worse cases numbers to the application that uses Cassandra Thanks, Miriam == Miriam Allalouf n On Thu, Jan 20, 2011 at 1:53 PM, indika kumara indika.k...@gmail.comwrote

Configurability of the implementation of the Cassandra.Iface

2011-01-20 Thread indika kumara
Hi all, Would it be worth the capability of configuring the implementation of the Cassandra.Iface?. I have to intercept the requests to the Cassandra server without modifying the existing code (CassandraServer.java). So, the server-side implementation of the Cassandra.Iface (CassandraServer) need

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread indika kumara
As the actual problem is mostly related to the number of CFs in the system (may be number of the columns), I still believe that supporting exposing the Cassandra ‘as-is’ to a tenant is doable and suitable though need some fixes. That multi-tenancy model allows a tenant to use the programming

Re: Multi-tenancy, and authentication and authorization

2011-01-19 Thread indika kumara
, indika kumara indika.k...@gmail.comwrote: As the actual problem is mostly related to the number of CFs in the system (may be number of the columns), I still believe that supporting exposing the Cassandra ‘as-is’ to a tenant is doable and suitable though need some fixes. That multi-tenancy

Is there a concept of a session

2011-01-18 Thread indika kumara
Hi All, Is there a concept of a session? I would like to log-in(authenticate) one time into the Cassandra, and then subsequently access the Cassandra without authenticating again. Thanks, Indika

Re: Is there a concept of a session

2011-01-18 Thread indika kumara
, indika kumara indika.k...@gmail.com wrote: Hi All, Is there a concept of a session? I would like to log-in(authenticate) one time into the Cassandra, and then subsequently access the Cassandra without authenticating again. Thanks, Indika

Re: Is there a concept of a session

2011-01-18 Thread indika kumara
the documentation here ? http://www.riptano.com/sites/default/files/hector-v2-client-doc.pdf (also yes the session is server side, each connection has a thread on the server it connects to) Aaron On 18/01/2011, at 10:40 PM, indika kumara indika.k...@gmail.com wrote: Hi Aaron, Thank you

Re: Is there a concept of a session

2011-01-18 Thread indika kumara
as long as the client wants it to. Try the Hector mailing list for details on it's implementation. Aaron On 18/01/2011, at 11:15 PM, indika kumara indika.k...@gmail.com wrote: Thanks Aaron... Hector cannot uses strategies such as cookies for maintaining session, so it has to make

Re: Multi-tenancy, and authentication and authorization

2011-01-18 Thread indika kumara
to discussion let's move this to the user list. A On 17/01/2011, at 7:44 PM, indika kumara indika.k...@gmail.com wrote: Hi Stu, In our app, we would like to offer cassandra 'as-is' to tenants. It that case, each tenant should be able to create Keyspaces as needed. Based

Re: Multi-tenancy, and authentication and authorization

2011-01-18 Thread indika kumara
, Indika On Tue, Jan 18, 2011 at 5:26 PM, indika kumara indika.k...@gmail.comwrote: Moving to user list On Tue, Jan 18, 2011 at 4:05 PM, Aaron Morton aa...@thelastpickle.comwrote: Have a read about JVM heap sizing here http://wiki.apache.org/cassandra/MemtableThresholds If you let people create

Re: Multi-tenancy, and authentication and authorization

2011-01-18 Thread indika kumara
Hi Aaron, I read some articles about the Cassandra, and now understand a little bit about trade-offs. I feel the goal should be to optimize memory as well as performance. I have to consider the number of column families, the columns per a family, the number of rows, the memtable’s threshold, and