Bringing together the Apache Cassandra experts from the community and DataStax.

Want to learn? Have a question? Want to share your expertise? You are in the right place!

Not sure where to begin? Getting Started

 

question

satvantsingh_190085 avatar image
satvantsingh_190085 asked ·

What is the difference between user and logins in Cassandra ?

Could you please explain what is the difference between logins & users. Can database user perform Cassandra maintenance activity like repairing ,adding node removing node etc. ?

security
10 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

1 Answer

smadhavan avatar image
smadhavan answered ·

@satvantsingh_190085, CQL uses database roles to represent users and group of users and login is a privilege or an attribute associated with the database role. Refer to the following references for additional details,

Adding/removing roles and granting/revoking of permissions is handled dynamically once the initial setup is complete, so no further restarts are required if permissions are altered.

6 comments Share
10 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

So what privileges 'login' have and what is privileges 'super' have.

In Cassandra we have structure like Keyspaces -> tables , So what is you referring 'database role' ?

I didn't understand the means of super and login. Could you please explain a bit more.

0 Likes 0 · ·
1590917733019.png (3.9 KiB)
smadhavan avatar image smadhavan satvantsingh_190085 ·

@satvantsingh_190085, LOGIN is an attribute that allows a role to log into the database (think of connecting via CQLSH) whereas, SUPERUSER is an elevated privilege to perform additional activities such as creating other users, granting/revoking permissions, etc.,. There are a variety of permissions that you could assign to a role to provide fine grained control to the DB objects such as keyspace, tables, etc.,

https://cassandra.apache.org/doc/latest/cql/security.html#data-control

0 Likes 0 · ·

Thanks @smadhavan for clarification , To perform Cassandra cluster maintenance activities like repairing ,rebuilding , compaction , adding/removing node does Cassandra need any specific user/role apart form database role "superuser"?

0 Likes 0 · ·
Show more comments