Luc Perkins lucperkins

Riak Security 2.0: Not Just a Firewall Anymore

If you wanted to use Riak in a secure fashion in versions prior to 2.0, your only option was to do so at the network level, using a firewall or similar protective layer. While this is sufficient for a lot of use cases, the problem with this form of security is that if someone can penetrate the firewall, they essentially have unrestricted access to a Riak cluster. They can perform reads and writes, run MapReduce jobs, you name it.

In Riak version 2.0, this is changing in dramatic fashion. While you can still apply a network security layer if you wish, Riak now comes with security features that protect Riak itself and not just to the network in which it's housed. Most importantly, in Riak 2.0 you can both authorize users to perform specific tasks (from standard read/write/delete operations to search queries to managing bucket types) and authenticate users and clients using a variety of security mechanisms.

I

Proposed new docs

Topic	Y or N	Assignee
Rolling restart

	var object1 = { firstName: 'Luc', lastName: 'Perkins' };
	var object2 = { age: 31, hobbies: ['singing', 'guitar', 'history', 'philosophy', 'programming']};

	for (key in object2) {
	object1[key] = object2[key];
	}

	// The result
	{ firstName: 'Luc',
	lastName: 'Perkins',

	import 'dart:convert';

	abstract class CompatibleJson {
	Map<String, dynamic> get attributes;

	bool jsonCompatible(Map<String, dynamic> json) {
	return (json.keys.length == attributes.keys.length) &&
	(json.keys.every((String key) => key.runtimeType == String)) &&
	(json.keys.every((String key) => attributes.keys.contains(key)) &&
	(json.values.every((dynamic value) => attributes.values.runtimeType == value.runtimeType));

	abstract class Being {}
	abstract class Nothing {}
	abstract class Becoming extends Being with Nothing {}
	abstract class Nature extends Becoming {}
	abstract class Lack extends Nature {}
	abstract class LivingThing extends Lack {}

	class Person extends LivingThing {
	String name;
	Person(this.name);

	@CustomTag('x-note-element')
	class NoteElement extends LIElement with Polymer, Observable {
	@published Note note;
	NoteElement.created() : super.created();
	}

	@CustomTag('x-notebook-element')
	class NotebookElement extends PolymerElement {
	@published Notebook notebook = new Notebook(new List<Note>());
	NotebookElement.created() : super.created();

	Here is the master list of all currently available `riak.conf` params:

	### Homeless

	retry_put_coordinator_failure
	metadata_cache_size

	### Search

	search.root_dir

	package basho.riak;

	import com.basho.riak.client.RiakClient;
	import com.basho.riak.client.operations.FetchDatatype;
	import com.basho.riak.client.operations.FetchSet;
	import com.basho.riak.client.operations.UpdateSet;
	import com.basho.riak.client.operations.datatypes.SetUpdate;
	import com.basho.riak.client.operations.indexes.BinIndexQuery;
	import com.basho.riak.client.operations.kv.DeleteValue;
	import com.basho.riak.client.operations.kv.FetchValue;

	import psycopg2
	from riak import RiakClient, RiakObject
	from riak.datatypes import Set
	import datetime

	# Riak connection and set
	client = RiakClient(pb_port=8087)
	SETS_BUCKET = client.bucket_type('sets').bucket('key_sets')

	# Get columns for table

	#floatingMenu {
	border: 1px solid black;
	}