Proxy Login and Execute
Allow a role to execute individual commands or all commands as another role. Typically used when users are interacting with the database through an application that authenticates the users before sending the request to the DataStax Enterprise database.
Synopsis
-
To allow a role to proxy execute and login with another role:
GRANT PROXY.EXECUTE, PROXY.LOGIN ON ROLE <role_name> TO <application_role>; -
To revoke permissions for a role with proxy execute and login access:
REVOKE <permission_name> ON ROLE <role_name> FROM <application_role>;
Proxy permissions
| Privilege | Resource | Permissions |
|---|---|---|
PROXY.EXECUTE |
ALL ROLES |
After authenticating issue individual requests as any specified role. |
PROXY.LOGIN |
ROLE |
After authenticating issue all requests as any specified role. |
PROXY.EXECUTE |
ROLE |
After authenticating issue individual requests as a different user. |
PROXY.LOGIN |
ROLE |
After authenticating issue all requests as a different user. |
