adelapena commented on code in PR #2125: URL: https://github.com/apache/cassandra/pull/2125#discussion_r1128410033
########## doc/modules/cassandra/pages/cql/cql_singlefile.adoc: ########## @@ -2420,6 +2421,12 @@ use of function in `CREATE AGGREGATE` | | | wildcard pattern | | | |`EXECUTE` |`MBEAN` |Execute operations on named mbean | | | + +|`UNMASK` |`ALL KEYSPACES` |See the clear contents of masked columns on any table | | | + +|`UNMASK` |`KEYSPACE` |See the clear contents of masked columns on any table in keyspace | | | + +|`UNMASK` |`TABLE` |See the clear contents of masked columns on specified table | | | Review Comment: Changed ########## doc/modules/cassandra/pages/cql/dynamic_data_masking.adoc: ########## @@ -67,3 +67,61 @@ In a similar way, a masking function can be dettached from a column with an `ALT ---- include::example$CQL/ddm_drop_mask.cql[] ---- + +== Permissions + +The `UNMASK` permission allows users to retrieve the unmasked values of masked columns. +The masks will only be applied to the results of a `SELECT` query if the user doesn't have the `UNMASK` permission. +Ordinary users are created without the `UNMASK` permission, whereas superusers do have it. + +As an example, suppose that we have table with masked columns: Review Comment: Fixed ########## doc/modules/cassandra/pages/cql/security.adoc: ########## @@ -477,6 +478,12 @@ and use of any function in keyspace in `CREATE AGGREGATE` | `EXECUTE` | `MBEANS` | Execute operations on any mbean matching a wildcard pattern | `EXECUTE` | `MBEAN` | Execute operations on named mbean + +|`UNMASK` |`ALL KEYSPACES` | See the clear contents of masked columns on any table + +|`UNMASK` |`KEYSPACE` | See the clear contents of masked columns on any table in keyspace + +|`UNMASK` |`TABLE` | See the clear contents of masked columns on specified table Review Comment: Changed -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
