Re: can't make any permissions change in 2.2.4

2015-12-19 Thread Kai Wang
Thank you, Sam. On Dec 19, 2015 12:35 PM, "Sam Tunnicliffe" wrote: > Sorry about the confusing omission of the upgrade instructions from > NEWS.txt, the oversight there was mine in the course of CASSANDRA-7653. > Dropping those tables is absolutely what you need to do in order to trigger > C* to

Re: [Marketing Mail] Re: [Marketing Mail] can't make any permissions change in 2.2.4

2015-12-19 Thread Sam Tunnicliffe
Sorry about the confusing omission of the upgrade instructions from NEWS.txt, the oversight there was mine in the course of CASSANDRA-7653. Dropping those tables is absolutely what you need to do in order to trigger C* to switch over to using the new role-based tables following an upgrade to 2.2+

Re: [Marketing Mail] Re: [Marketing Mail] can't make any permissions change in 2.2.4

2015-12-19 Thread Kai Wang
Some update. I went through this blog: https://www.instaclustr.com/5-things-you-need-to-know-about-cassandra-2-2/ and deleted these three tables (with fingers crossed): system_auth.credentials system_auth.users system_auth.permissions Now I seem to be able to use RBAC to modify permissions. On

Re: [Marketing Mail] Re: [Marketing Mail] can't make any permissions change in 2.2.4

2015-12-18 Thread Kai Wang
Sylvain, Thank you very much. On Fri, Dec 18, 2015 at 9:20 AM, Sylvain Lebresne wrote: > On Fri, Dec 18, 2015 at 3:04 PM, Kai Wang wrote: > >> Reynald, >> >> Thanks for link. That explains it. >> >> Sylvain, >> >> What exactly are the "legacy tables" I am supposed to drop? Before I drop >> the

Re: [Marketing Mail] Re: [Marketing Mail] can't make any permissions change in 2.2.4

2015-12-18 Thread Sylvain Lebresne
On Fri, Dec 18, 2015 at 3:04 PM, Kai Wang wrote: > Reynald, > > Thanks for link. That explains it. > > Sylvain, > > What exactly are the "legacy tables" I am supposed to drop? Before I drop > them, is there any way I can confirm the old schema has been converted to > the new one successfully? >

Re: [Marketing Mail] Re: [Marketing Mail] can't make any permissions change in 2.2.4

2015-12-18 Thread Kai Wang
Reynald, Thanks for link. That explains it. Sylvain, What exactly are the "legacy tables" I am supposed to drop? Before I drop them, is there any way I can confirm the old schema has been converted to the new one successfully? Thanks. On Fri, Dec 18, 2015 at 5:05 AM, Reynald Bourtembourg < re

Re: [Marketing Mail] Re: [Marketing Mail] can't make any permissions change in 2.2.4

2015-12-18 Thread Reynald Bourtembourg
Done: https://issues.apache.org/jira/browse/CASSANDRA-10904 On 18/12/2015 10:51, Sylvain Lebresne wrote: On Fri, Dec 18, 2015 at 8:55 AM, Reynald Bourtembourg mailto:reynald.bourtembo...@esrf.fr>> wrote: This does not seem to be explained in the Cassandra 2.2 Upgrading section of the

Re: [Marketing Mail] can't make any permissions change in 2.2.4

2015-12-18 Thread Sylvain Lebresne
On Fri, Dec 18, 2015 at 8:55 AM, Reynald Bourtembourg < reynald.bourtembo...@esrf.fr> wrote: > This does not seem to be explained in the Cassandra 2.2 Upgrading section > of the NEWS.txt file: > > >

Re: [Marketing Mail] can't make any permissions change in 2.2.4

2015-12-17 Thread Reynald Bourtembourg
Hi, Maybe your problem comes from the new role based access control in Cassandra introduced in Cassandra 2.2. http://www.datastax.com/dev/blog/role-based-access-control-in-cassandra The /Upgrading /section of this blog post is specifying the following: "/For systems already using the interna

Re: can't make any permissions change in 2.2.4

2015-12-17 Thread Robert Coli
On Thu, Dec 17, 2015 at 9:10 AM, Kai Wang wrote: > I used to able to add/drop users and modify permissions in 2.1.1. After > upgrading to 2.2.4, I can't modify any of those. "List all permissions" > returns me all the permissions I setup before the upgrade. But I can't add > new permission or add

can't make any permissions change in 2.2.4

2015-12-17 Thread Kai Wang
I used to able to add/drop users and modify permissions in 2.1.1. After upgrading to 2.2.4, I can't modify any of those. "List all permissions" returns me all the permissions I setup before the upgrade. But I can't add new permission or add new users in cqlsh. "create user" and "grant" didn't repor