@@ -34,7 +34,7 @@ def role_creator_permissions(self, creator, role):
3434 permissions = ('ALTER' , 'DROP' , 'DESCRIBE' )
3535 return [(creator , role , perm ) for perm in permissions ]
3636
37- def cluster_version_has_unmask_permission (self ):
37+ def cluster_version_has_masking_permissions (self ):
3838 return self .cluster .version () >= LooseVersion ('4.2' )
3939
4040 def data_resource_creator_permissions (self , creator , resource ):
@@ -48,8 +48,9 @@ def data_resource_creator_permissions(self, creator, resource):
4848 for perm in 'SELECT' , 'MODIFY' , 'ALTER' , 'DROP' , 'AUTHORIZE' :
4949 permissions .append ((creator , resource , perm ))
5050
51- if self .cluster_version_has_unmask_permission ():
51+ if self .cluster_version_has_masking_permissions ():
5252 permissions .append ((creator , resource , 'UNMASK' ))
53+ permissions .append ((creator , resource , 'SELECT_MASKED' ))
5354
5455 if resource .startswith ("<keyspace " ):
5556 permissions .append ((creator , resource , 'CREATE' ))
@@ -1683,8 +1684,9 @@ def test_filter_granted_permissions_by_resource_type(self):
16831684 ("mike" , "<keyspace ks>" , "SELECT" ),
16841685 ("mike" , "<keyspace ks>" , "MODIFY" ),
16851686 ("mike" , "<keyspace ks>" , "AUTHORIZE" )]
1686- if self .cluster_version_has_unmask_permission ():
1687+ if self .cluster_version_has_masking_permissions ():
16871688 permissions .append (("mike" , "<keyspace ks>" , "UNMASK" ))
1689+ permissions .append (("mike" , "<keyspace ks>" , "SELECT_MASKED" ))
16881690 self .assert_permissions_listed (permissions ,
16891691 self .superuser ,
16901692 "LIST ALL PERMISSIONS OF mike" )
@@ -1697,8 +1699,9 @@ def test_filter_granted_permissions_by_resource_type(self):
16971699 ("mike" , "<table ks.cf>" , "SELECT" ),
16981700 ("mike" , "<table ks.cf>" , "MODIFY" ),
16991701 ("mike" , "<table ks.cf>" , "AUTHORIZE" )]
1700- if self .cluster_version_has_unmask_permission ():
1702+ if self .cluster_version_has_masking_permissions ():
17011703 permissions .append (("mike" , "<table ks.cf>" , "UNMASK" ))
1704+ permissions .append (("mike" , "<table ks.cf>" , "SELECT_MASKED" ))
17021705 self .assert_permissions_listed (permissions ,
17031706 self .superuser ,
17041707 "LIST ALL PERMISSIONS OF mike" )
0 commit comments