@@ -34,7 +34,7 @@ def role_creator_permissions(self, creator, role):
3434 permissions = ('ALTER' , 'DROP' , 'DESCRIBE' )
3535 return [(creator , role , perm ) for perm in permissions ]
3636
37- def cluster_version_has_unmask_permission (self ):
37+ def cluster_version_has_masking_permissions (self ):
3838 return self .cluster .version () >= LooseVersion ('4.2' )
3939
4040 def data_resource_creator_permissions (self , creator , resource ):
@@ -48,8 +48,9 @@ def data_resource_creator_permissions(self, creator, resource):
4848 for perm in 'SELECT' , 'MODIFY' , 'ALTER' , 'DROP' , 'AUTHORIZE' :
4949 permissions .append ((creator , resource , perm ))
5050
51- if self .cluster_version_has_unmask_permission ():
51+ if self .cluster_version_has_masking_permissions ():
5252 permissions .append ((creator , resource , 'UNMASK' ))
53+ permissions .append ((creator , resource , 'SELECT_MASKED' ))
5354
5455 if resource .startswith ("<keyspace " ):
5556 permissions .append ((creator , resource , 'CREATE' ))
@@ -1673,8 +1674,9 @@ def test_filter_granted_permissions_by_resource_type(self):
16731674 ("mike" , "<keyspace ks>" , "SELECT" ),
16741675 ("mike" , "<keyspace ks>" , "MODIFY" ),
16751676 ("mike" , "<keyspace ks>" , "AUTHORIZE" )]
1676- if self .cluster_version_has_unmask_permission ():
1677+ if self .cluster_version_has_masking_permissions ():
16771678 permissions .append (("mike" , "<keyspace ks>" , "UNMASK" ))
1679+ permissions .append (("mike" , "<keyspace ks>" , "SELECT_MASKED" ))
16781680 self .assert_permissions_listed (permissions ,
16791681 self .superuser ,
16801682 "LIST ALL PERMISSIONS OF mike" )
@@ -1687,8 +1689,9 @@ def test_filter_granted_permissions_by_resource_type(self):
16871689 ("mike" , "<table ks.cf>" , "SELECT" ),
16881690 ("mike" , "<table ks.cf>" , "MODIFY" ),
16891691 ("mike" , "<table ks.cf>" , "AUTHORIZE" )]
1690- if self .cluster_version_has_unmask_permission ():
1692+ if self .cluster_version_has_masking_permissions ():
16911693 permissions .append (("mike" , "<table ks.cf>" , "UNMASK" ))
1694+ permissions .append (("mike" , "<table ks.cf>" , "SELECT_MASKED" ))
16921695 self .assert_permissions_listed (permissions ,
16931696 self .superuser ,
16941697 "LIST ALL PERMISSIONS OF mike" )
0 commit comments