Swapnil Bawaskar created GEODE-3108:
---------------------------------------
Summary: secure ability to create lucene indexes
Key: GEODE-3108
URL: https://issues.apache.org/jira/browse/GEODE-3108
Project: Geode
Issue Type: Sub-task
Components: security
Reporter: Swapnil Bawaskar
Assignee: Kenneth Howe
Treat queries as a CLUSTER resource so that administrators can control ability
to manage indices (both OQL and Lucene), and manage Continuous queries.
Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh
commands:
{noformat}
create index
define index
destroy index
create defined indexes
close durable-cq
close durable-client
clear defined indexes
create lucene index
destroy lucene index
{noformat}
And the following JMX bean methods:
{noformat}
CacheServerMXBean.closeAllContinuousQuery
CacheServerMXBean.closeContinuousQuery
DistributedSystemMXBean.setQueryCollectionsDepth
DistributedSystemMXBean.setQueryResultSetLimit
{noformat}
A user with CLUSTER:READ:QUERY should be able to run the following commands:
{noformat}
list indexes
describe lucene index
list lucene indexes
{noformat}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
