Skip to content
Snippets Groups Projects
  1. Dec 15, 2023
  2. Dec 14, 2023
  3. Dec 13, 2023
  4. Dec 12, 2023
  5. Dec 11, 2023
    • Dmitry Rodionov's avatar
      feat: validate combination of object type and privilege in PrivilegeDef · 8b06edb7
      Dmitry Rodionov authored
      At the later stage I discovered that sbroad applies the same validation
      rules during parsing of grant/revoke statements and even its own
      Privilege enum that is a ~copy of our PrivilegeType. Unfortunately
      at the moment there is no way to share code between picodata and sbroad
      efficiently (now only tarantool-module is shared and it is not suitable
      for such kind of things) so it still makes sense to have this in
      picodata because this is the point where all APIs converge to the single
      point (CaS). In the future all other ways of validation should be
      removed. Aside from sbroad similar kind of validation is performed
      independently on lua API side.
      
      Note that in prior commit 45ba7392 we've
      removed all privileges from role super. This patch removes privileges
      from admin that do not match the model: namely all privileges on
      universe except session and usage. With this patch it is no longer possible
      to grant or revoke such privileges.
      8b06edb7
    • Dmitry Rodionov's avatar
      refactor: make fields of PrivilegeDef private · 9906a79e
      Dmitry Rodionov authored
      This allows future constructors to enforce invariants.
      Additionally this commit removes redundant set_schema_version on Op by
      passing schema version to corresponding Op constructors.
      9906a79e
  6. Dec 08, 2023
  7. Dec 07, 2023
  8. Dec 06, 2023
Loading