[YCQL] Cannot CREATE TYPE when user has CREATE permissions for keyspace

[jameshartig]

A user that has CREATE permissions on a keyspace cannot CREATE types, but can create tables fine. This is potentially similar to the issue in #2373.

The user has the following permissions:

GRANT CREATE ON KEYSPACE accounts_api TO accounts_api;

Then as accounts_api try to create a type in that keyspace:

CREATE TYPE IF NOT EXISTS accounts_api.mytype (id TEXT);

Gives an error:

Unauthorized: Error from server: code=2100 [Unauthorized] message="Unauthorized. User accounts_api has no CREATE permission on <all keyspaces> or any of its parents
CREATE TYPE IF NOT EXISTS accounts_api.mytype (id TEXT);
^^^^^^
 (ql error -4)"

But the user has CREATE permissions on that keyspace:

> SELECT * FROM system_auth.role_permissions WHERE resource = 'data/accounts_api';

 role         | resource          | permissions
--------------+-------------------+--------------------------------------------------------------
    cassandra | data/accounts_api | ['ALTER', 'AUTHORIZE', 'CREATE', 'DROP', 'MODIFY', 'SELECT']
 accounts_api | data/accounts_api |                      ['SELECT', 'MODIFY', 'CREATE', 'ALTER']

(2 rows)

[OlegLoginov]

Fixed by the commit above.