[
https://issues.apache.org/jira/browse/CASSANDRA-19417?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17821140#comment-17821140
]
Stefan Miklosovic commented on CASSANDRA-19417:
-----------------------------------------------
[~skoppu] would you please initiate a ML thread in dev@ to increase the
visibility? We might also discuss all the details as Maxwell mentions. I think
that LIST USERS modification to accept options is also possible and probably
preferred instead of the introduction of a new CQL statement.
> LIST SUPERUSERS cql command
> ---------------------------
>
> Key: CASSANDRA-19417
> URL: https://issues.apache.org/jira/browse/CASSANDRA-19417
> Project: Cassandra
> Issue Type: Improvement
> Components: Tool/cqlsh
> Reporter: Shailaja Koppu
> Assignee: Shailaja Koppu
> Priority: Normal
> Labels: CQL
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Developing a new CQL command LIST SUPERUSERS to return list of roles with
> superuser privilege. This includes roles who acquired superuser privilege in
> the hierarchy.
> Context: LIST ROLES cql command lists roles, their membership details and
> displays super=true for immediate superusers. But there can be roles who
> acquired superuser privilege due to a grant. LIST ROLES command won't display
> super=true for such roles and the only way to recognize such roles is to look
> for atleast one row with super=true in the output of LIST ROLES OF <role
> name> command. While this works to check is a given role has superuser
> privilege, there may be services (for example, Sidecar) working with C* and
> may need to maintain list of roles with superuser privilege. There is no
> existing command/tool to retrieve such roles details. Hence developing this
> command which returns all roles having superuser privilege.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
