[ https://issues.apache.org/jira/browse/CASSANDRA-16404?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17382085#comment-17382085 ]
Aleksei Zotov commented on CASSANDRA-16404: ------------------------------------------- [~blerer] The plan sounds good to me! I'd be glad to give a try to {{CASSANDRA-16806.}} [~samt] Do you want me to change the syntax for {{invalidatepermissionscache}} command only or for all? I'll think on other syntax in order to simplify operations. Just a couple of thoughts: # "-u" might be bit confusing because there is "(-u <username> | --username <username>)" which is JMX user. # if we do not have enough information from input to construct "Resource" then we'll have to iterate through all cached records because "Resource" is a part of key . It actually should not be a significant issue because there should not be many records, but I just want to highlight that. > Provide a nodetool way of invalidating auth caches > -------------------------------------------------- > > Key: CASSANDRA-16404 > URL: https://issues.apache.org/jira/browse/CASSANDRA-16404 > Project: Cassandra > Issue Type: Improvement > Components: Feature/Authorization > Reporter: Sumanth Pasupuleti > Assignee: Aleksei Zotov > Priority: Normal > Fix For: 4.x > > Time Spent: 50m > Remaining Estimate: 0h > > We currently have nodetool commands to invalidate certain caches like > KeyCache, RowCache and CounterCache. > Being able to invalidate auth caches as well can come in handy in situations > where, critical backend auth changes may need to be in effect right away for > all the connections, especially in configurations where cache validity is > chosen to be for a longer duration. An example can be that an authenticated > user "User1" is no longer authorized to access a table resource "table1" and > it is vital that this change is reflected right away, without having to wait > for cache expiry/refresh to trigger. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org For additional commands, e-mail: commits-h...@cassandra.apache.org