Repository: cassandra Updated Branches: refs/heads/trunk 7bea74b76 -> 68c2d2e6a
Document Un-revokable Select on System Keyspaces Patch by Russell Spitzer; Reviewed by Jeff Jirsa for CASSANDRA-13184 Project: http://git-wip-us.apache.org/repos/asf/cassandra/repo Commit: http://git-wip-us.apache.org/repos/asf/cassandra/commit/68c2d2e6 Tree: http://git-wip-us.apache.org/repos/asf/cassandra/tree/68c2d2e6 Diff: http://git-wip-us.apache.org/repos/asf/cassandra/diff/68c2d2e6 Branch: refs/heads/trunk Commit: 68c2d2e6afc1c0ace103cd1e02e7df7b430f9f4d Parents: 7bea74b Author: Russell Spitzer <russell.spit...@gmail.com> Authored: Fri Feb 3 10:35:37 2017 -0800 Committer: Jeff Jirsa <jji...@apple.com> Committed: Sun Aug 27 12:56:51 2017 -0700 ---------------------------------------------------------------------- doc/source/cql/security.rst | 9 +++++++++ 1 file changed, 9 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cassandra/blob/68c2d2e6/doc/source/cql/security.rst ---------------------------------------------------------------------- diff --git a/doc/source/cql/security.rst b/doc/source/cql/security.rst index 9efe27f..ada6517 100644 --- a/doc/source/cql/security.rst +++ b/doc/source/cql/security.rst @@ -472,6 +472,15 @@ For instance:: REVOKE EXECUTE ON FUNCTION keyspace1.user_function( int ) FROM report_writer; REVOKE DESCRIBE ON ALL ROLES FROM role_admin; +Because of their function in normal driver operations, certain tables cannot have their `SELECT` permissions +revoked. The following tables will be available to all authorized users regardless of their assigned role:: + +* `system_schema.keyspaces` +* `system_schema.columns` +* `system_schema.tables` +* `system.local` +* `system.peers` + .. _list-permissions-statement: LIST PERMISSIONS --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org