Summary
This article covers an issue when a keyspace is not found.
Symptoms
I setup a role with login permissions, and the role correlates to a group in the LDAP directory. My roles permissions are:
cqlsh> list ALL permissions OF "DSE_Item";
role | username | resource | permission | granted | restricted | grantable
----------+----------+--------------------------------------+------------+---------+------------+-----------
DSE_Item | DSE_Item | <keyspace item> | MODIFY | True | False | False
DSE_Item | DSE_Item | <table item.item_country_by_item_id> | SELECT | True | False | False
However, when I try to perform any actions, I receive an error:
cqlsh> SELECT * FROM item.item_country_by_item_id LIMIT 10;
Keyspace ‘item’ not found.
Solution
- Check whether the parameter system_keyspaces_filtering is set to true.
- If so, then you have to also grant describe permissions on the keyspace in order for the user to have access to the keyspace:
GRANT DESCRIBE ON KEYSPACE item TO ROLE "DSE_Item";