Hi all, I would like to propose to add support for a sort of a security role that can grant/revoke permissions to a user to a resource (KS, table,...) but _not_ access the data in that resource itself. Data may be sensitive, have legal constrains, etc but this separation of duties should enable that. Think of a hospital where IT can grant/revoke permissions to doctors but IT should _not_ have access to the data itself.
I have createdhttps://issues.apache.org/jira/browse/CASSANDRA-17501 <https://issues.apache.org/jira/browse/CASSANDRA-17501> with more details. If anybody has any concerns or questions with this functionality I will be happy to discuss them. Thx in advance.
