nvharikrishna commented on code in PR #215:
URL: https://github.com/apache/cassandra-sidecar/pull/215#discussion_r2162000033
##########
server/src/main/java/org/apache/cassandra/sidecar/acl/authorization/BasicPermissions.java:
##########
@@ -79,4 +79,5 @@ public class BasicPermissions
// Live Migration permissions
public static final Permission LIST_FILES = new
DomainAwarePermission("LIVE_MIGRATION:LIST_FILES", CLUSTER_SCOPE);
+ public static final Permission STREAM_FILES = new
DomainAwarePermission("LIVE_MIGRATION:STREAM", CLUSTER_SCOPE);
Review Comment:
Proposing to keep the stream permission to Sidecar only by default. From
CEP-40,
<img width="1249" alt="image"
src="https://github.com/user-attachments/assets/d7409d44-1ace-439f-b7cc-1155e4deb2f2";
/>
list APIS can be exposed to admin/operator (for debugging purposes).
admin/operator can check the list, but may not be required to download the
files.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: pr-unsubscr...@cassandra.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: pr-unsubscr...@cassandra.apache.org
For additional commands, e-mail: pr-h...@cassandra.apache.org
