This is an automated email from the ASF dual-hosted git repository.

netudima pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/cassandra.git

commit 80dc41bae59451786e5c82f72675fd3dde2806da
Merge: 4f077ed3ea cf8758dc44
Author: Dmitry Konstantinov <[email protected]>
AuthorDate: Thu Sep 3 11:48:24 2026 +0100

    Merge branch 'cassandra-6.0' into trunk
    
    * cassandra-6.0:
      Optimize authorization logic for BatchStatement and TransactionStatement 
when a single table is updated

 CHANGES.txt                                        |   1 +
 NEWS.txt                                           |   5 +
 .../cassandra/cql3/statements/BatchStatement.java  |   3 +-
 .../cql3/statements/ModificationStatement.java     |  53 ++++-
 .../cql3/statements/TransactionStatement.java      |   3 +-
 .../org/apache/cassandra/auth/BatchAuthTest.java   | 238 +++++++++++++++++++++
 .../org/apache/cassandra/auth/TxnAuthTest.java     |  59 ++++-
 7 files changed, 346 insertions(+), 16 deletions(-)

diff --cc CHANGES.txt
index a023d21b96,5b811256d2..33165033a6
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@@ -1,14 -1,5 +1,15 @@@
 -6.0-alpha3
 +7.0
 + * Reject LIKE patterns with a wildcard (%) anywhere other than the start or 
end (CASSANDRA-21068)
 + * Support pluggable default role initialization (CASSANDRA-21546)
 + * Add prepared statement cache stats to nodetool info (CASSANDRA-14366)
 + * Don't increment client metrics on messaging service connection unpause 
(CASSANDRA-21491)
 + * Add nodetool getreplicas (CASSANDRA-17665)
 + * Implementation of CEP-49: Hardware-accelerated compression 
(CASSANDRA-20975)
 + * Avoid using ObjectUtils.getFirstNonNull in Schema (CASSANDRA-21394)
 + * Allow nodetool garbagecollect to take a user defined list of SSTables 
(CASSANDRA-16767)
 + * Add a guardrail for misprepared statements (CASSANDRA-21139)
 +Merged from 6.0:
+  * Optimize authorization logic for BatchStatement and TransactionStatement 
when a single table is updated (CASSANDRA-21606)
   * Upgrade lz4-java to 1.11.2 (CASSANDRA-21564)
   * Encode the CQL as raw bytes to avoid utf string serialization length 
limitation (CASSANDRA-21599)
   * Add a guardrail to disallow reconfiguring CMS below a minimum size 
(CASSANDRA-19195)
diff --cc NEWS.txt
index 650ce7c2e3,7cf98d2892..9d6a2c6e93
--- a/NEWS.txt
+++ b/NEWS.txt
@@@ -74,31 -74,6 +74,36 @@@ restore snapshots created with the prev
  'sstableloader' tool. You can upgrade the file format of your snapshots
  using the provided 'sstableupgrade' tool.
  
 +7.0
 +===
 +
 +New features
 +------------
 +
 +    - CEP-49 - it is possible to implement custom compression providers, e.g.
 +      integrating with a specialized hardware which makes de/compression 
faster.
 +      See CASSANDRA-20975 for more information.
 +    - It is now possible to bootstrap a cluster's initial superuser role 
without
 +      creating the 'cassandra/cassandra' password, by configuring 
'default_role_initializer'
 +      in cassandra.yaml. The new MutualTlsDefaultRoleInitializer creates the 
role
 +      passwordless and maps a client certificate identity onto it instead, for
 +      deployments that authenticate over mutual TLS. 
PasswordDefaultRoleInitializer
 +      remains the default and produces the historical behaviour. See 
CASSANDRA-21546
 +      for more information.
 +
 +Upgrading
 +---------
 +
 +    - trickle_fsync is by default set to "true" instead of "false" in 
cassandra.yaml (see CASSANDRA-21572)
++    - Authorizing a batch or an Accord transaction now performs the table 
permission checks once per run of
++      consecutive statements on the same table rather than once per 
statement. The permissions required are
++      unchanged, and the datacenter and CIDR checks that ride along with them 
still run at least once per
++      request. Auth cache request/hit/miss counts and the 
system_views.cidr_filtering_metrics_* counts and
++      latencies will therefore report fewer events than before. (see 
CASSANDRA-21606)
 +
 +Deprecation
 +-----------
 +
  
  6.0
  ===


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to