Valery Baranov created CASSANDRA-21051:
------------------------------------------

             Summary: Add test for check permissions after authorize
                 Key: CASSANDRA-21051
                 URL: https://issues.apache.org/jira/browse/CASSANDRA-21051
             Project: Apache Cassandra
          Issue Type: Task
            Reporter: Valery Baranov


There is no test covering this case: a user must have more than just the 
AUTHORIZE permission to grant permissions to others.


{code:java}
    // 
src/java/org/apache/cassandra/cql3/statements/PermissionsManagementStatement.java
    public void authorize(ClientState state) throws UnauthorizedException
    {
        ...
        for (Permission p : permissions)
            state.ensurePermission(p, resource);
    }{code}

If I remove these two lines, the existing tests will still pass.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to