[
https://issues.apache.org/jira/browse/GEODE-3108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Swapnil Bawaskar updated GEODE-3108:
------------------------------------
Description:
Treat queries as a CLUSTER resource so that administrators can control ability
to manage indices (both OQL and Lucene), and manage Continuous queries.
Only a user with CLUSTER:MANAGE:LUCENE should be able to run the following gfsh
commands:
{noformat}
create lucene index
destroy lucene index
{noformat}
A user with CLUSTER:READ:LUCENE should be able to run the following commands:
{noformat}
describe lucene index
list lucene indexes
{noformat}
was:
Treat queries as a CLUSTER resource so that administrators can control ability
to manage indices (both OQL and Lucene), and manage Continuous queries.
Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh
commands:
{noformat}
create index
define index
destroy index
create defined indexes
close durable-cq
close durable-client
clear defined indexes
create lucene index
destroy lucene index
{noformat}
And the following JMX bean methods:
{noformat}
CacheServerMXBean.closeAllContinuousQuery
CacheServerMXBean.closeContinuousQuery
DistributedSystemMXBean.setQueryCollectionsDepth
DistributedSystemMXBean.setQueryResultSetLimit
{noformat}
A user with CLUSTER:READ:QUERY should be able to run the following commands:
{noformat}
list indexes
describe lucene index
list lucene indexes
{noformat}
> secure ability to create lucene indexes
> ---------------------------------------
>
> Key: GEODE-3108
> URL: https://issues.apache.org/jira/browse/GEODE-3108
> Project: Geode
> Issue Type: Sub-task
> Components: security
> Reporter: Swapnil Bawaskar
> Assignee: Kenneth Howe
>
> Treat queries as a CLUSTER resource so that administrators can control
> ability to manage indices (both OQL and Lucene), and manage Continuous
> queries.
> Only a user with CLUSTER:MANAGE:LUCENE should be able to run the following
> gfsh commands:
> {noformat}
> create lucene index
> destroy lucene index
> {noformat}
> A user with CLUSTER:READ:LUCENE should be able to run the following commands:
> {noformat}
> describe lucene index
> list lucene indexes
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
