[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-24 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14640233#comment-14640233 ] Robert Stupp commented on CASSANDRA-9402: - Hm - thought we disable them in 2.2

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-24 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14640226#comment-14640226 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- The patch enables UDFs by

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-24 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14640279#comment-14640279 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- bq. Hm - thought we

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-24 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14640308#comment-14640308 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- We could relax the

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-24 Thread Sylvain Lebresne (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14640315#comment-14640315 ] Sylvain Lebresne commented on CASSANDRA-9402: - bq. But I would still

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-24 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14640323#comment-14640323 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- bq. Anyway, just wanted

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-24 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14640383#comment-14640383 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- +1 to the follow up patch

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-24 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14640390#comment-14640390 ] Robert Stupp commented on CASSANDRA-9402: - Thanks, committed follow-up as

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14639494#comment-14639494 ] Robert Stupp commented on CASSANDRA-9402: - Pushed another commit, that fixes

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread T Jake Luciani (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14639859#comment-14639859 ] T Jake Luciani commented on CASSANDRA-9402: --- +1 Implement proper

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread T Jake Luciani (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14638968#comment-14638968 ] T Jake Luciani commented on CASSANDRA-9402: --- Overall, This is an

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14638972#comment-14638972 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- Is it giving the user

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14638983#comment-14638983 ] Robert Stupp commented on CASSANDRA-9402: - Already pushed a commit to solve

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14639005#comment-14639005 ] Robert Stupp commented on CASSANDRA-9402: - bq. access to Keyspace, Schema, and

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14639147#comment-14639147 ] Jonathan Ellis commented on CASSANDRA-9402: --- nio is whitelisted, but my

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14639364#comment-14639364 ] Robert Stupp commented on CASSANDRA-9402: - Pushed two more commits: * some

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14639316#comment-14639316 ] Robert Stupp commented on CASSANDRA-9402: - All java UDFs land in

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-23 Thread T Jake Luciani (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14639310#comment-14639310 ] T Jake Luciani commented on CASSANDRA-9402: --- One other issue is the fact

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-16 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14629779#comment-14629779 ] Jonathan Ellis commented on CASSANDRA-9402: --- Sounds reasonable. Can you

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-12 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14623733#comment-14623733 ] Robert Stupp commented on CASSANDRA-9402: - For threads it would work (and it's

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-09 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14620549#comment-14620549 ] Jonathan Ellis commented on CASSANDRA-9402: --- Does the same hold true for the

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-09 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14619968#comment-14619968 ] Robert Stupp commented on CASSANDRA-9402: - bq. [restricted set of classes]

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-07-08 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14619633#comment-14619633 ] Jonathan Ellis commented on CASSANDRA-9402: --- bq. UDFs only have access to a

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-06-15 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14585843#comment-14585843 ] Robert Stupp commented on CASSANDRA-9402: - Pushed an update of sandboxing to

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-28 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14563860#comment-14563860 ] Robert Stupp commented on CASSANDRA-9402: - bq. So we can't use it to stop UDF

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-28 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14563277#comment-14563277 ] Jonathan Ellis commented on CASSANDRA-9402: --- bq. Why can't we do something

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-27 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14561804#comment-14561804 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- bq. Can we label UDF

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-27 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14561745#comment-14561745 ] Jonathan Ellis commented on CASSANDRA-9402: --- I'm also a bit concerned about

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-27 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14561895#comment-14561895 ] Robert Stupp commented on CASSANDRA-9402: - The pl/java SM is too lax. It only

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-27 Thread T Jake Luciani (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14561898#comment-14561898 ] T Jake Luciani commented on CASSANDRA-9402: --- bq. Can we label UDF

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-27 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14561820#comment-14561820 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- LGTM Implement proper

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-27 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14561840#comment-14561840 ] Robert Stupp commented on CASSANDRA-9402: - There are some other projects that

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-27 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14561845#comment-14561845 ] Jonathan Ellis commented on CASSANDRA-9402: --- I had a look at postgresql's

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-26 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558878#comment-14558878 ] Robert Stupp commented on CASSANDRA-9402: - white/blacklisting works like this:

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-26 Thread Brian Hess (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14559420#comment-14559420 ] Brian Hess commented on CASSANDRA-9402: I'm do think that you may want to

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-26 Thread Brian Hess (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14559291#comment-14559291 ] Brian Hess commented on CASSANDRA-9402: There is another alternative - FENCED

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-26 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14559398#comment-14559398 ] Jonathan Ellis commented on CASSANDRA-9402: --- Worth thinking about for the

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-25 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558467#comment-14558467 ] Jonathan Ellis commented on CASSANDRA-9402: --- bq. Permissions for UDFs is

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-25 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558522#comment-14558522 ] Robert Stupp commented on CASSANDRA-9402: - Updated the branch with working

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-25 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558524#comment-14558524 ] Robert Stupp commented on CASSANDRA-9402: - Although it's not fully implemented

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-25 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558503#comment-14558503 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- How does Posgres handle

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-25 Thread Aleksey Yeschenko (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558586#comment-14558586 ] Aleksey Yeschenko commented on CASSANDRA-9402: -- I'm not sure that having

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-25 Thread Jonathan Ellis (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14558574#comment-14558574 ] Jonathan Ellis commented on CASSANDRA-9402: --- PG splits it up into two parts:

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-24 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14557692#comment-14557692 ] Robert Stupp commented on CASSANDRA-9402: - I ran a standard [perf test on

[jira] [Commented] (CASSANDRA-9402) Implement proper sandboxing for UDFs

2015-05-24 Thread Robert Stupp (JIRA)
[ https://issues.apache.org/jira/browse/CASSANDRA-9402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14557814#comment-14557814 ] Robert Stupp commented on CASSANDRA-9402: - Current branch adds security