bereng commented on code in PR #2125: URL: https://github.com/apache/cassandra/pull/2125#discussion_r1127388900
########## doc/modules/cassandra/pages/cql/dynamic_data_masking.adoc: ########## @@ -67,3 +67,61 @@ In a similar way, a masking function can be dettached from a column with an `ALT ---- include::example$CQL/ddm_drop_mask.cql[] ---- + +== Permissions + +The `UNMASK` permission allows users to retrieve the unmasked values of masked columns. +The masks will only be applied to the results of a `SELECT` query if the user doesn't have the `UNMASK` permission. +Ordinary users are created without the `UNMASK` permission, whereas superusers do have it. + +As an example, suppose that we have table with masked columns: Review Comment: hav _a_ table -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
