Skip to content
Snippets Groups Projects
  1. Nov 16, 2023
  2. Nov 14, 2023
  3. Nov 13, 2023
  4. Nov 10, 2023
    • Dmitry Ivanov's avatar
      feat: implement audit log (initial patch) · ba967f50
      Dmitry Ivanov authored and Yaroslav Dynnikov's avatar Yaroslav Dynnikov committed
      Implemented:
      
      - features:
          * FFI wrappers for `say.{h,c}`
          * safe logger object on top of FFI definitions
          * unified tlog/audit definitions for formatting
          * fixed a needless allocation in tlog (new root per each line)
      
      - events:
          * create_user
          * drop_user
          * create_role
          * drop_role
          * change_password
          * grant_privilege
          * revoke_privilege
          * create_table
          * drop_table
          * grant_role
          * revoke_role
      
      Todo:
      
      - features:
          * unique id generation
          * security subject (who executed the action)
          * audit configuration (via `pico.audit` function)
      
      - well-defined events:
          * create_database (universe)
          * change_config
          * change_current_grade
      
      - special events (local to each node):
          * auth_ok / auth_fail
          * access_denied (still not sure if we absolutely need that)
          * audit_rotate
      
      - Unavailable (haven't been defined yet):
          * rename_user
          * create_procedure
          * drop_procedure
      
      Example:
      
      ```
      $ cat /tmp/audit.log
      2023-11-10 12:07:19.457 [15735] main/103/interactive I> audit log is ready, title: initialize_audit
      2023-11-10 12:07:19.457 [15735] main/103/interactive I> database is starting, title: startup
      2023-11-10 12:07:19.818 [15741] main/103/interactive I> audit log is ready, title: initialize_audit
      2023-11-10 12:07:19.818 [15741] main/103/interactive I> database is starting, title: startup
      2023-11-10 12:07:34.910 [15741] main/111/raft_main_loop storage.rs:2809 W> created user `KEK`, auth_type: chap-sha1, title: create_user
      2023-11-10 12:07:52.869 [15741] main/111/raft_main_loop storage.rs:2861 W> created role `mgr`, title: create_role
      2023-11-10 12:07:55.602 [15741] main/111/raft_main_loop storage.rs:2861 W> created role `kek`, title: create_role
      2023-11-10 12:07:57.594 [15741] main/111/raft_main_loop storage.rs:2906 W> granted role `mgr` to role `kek`, title: grant_role
      2023-11-10 12:08:08.482 [15741] main/111/raft_main_loop storage.rs:2913 W> granted privilege execute on universe `` to role `kek`, title: grant_privilege
      ```
      ba967f50
    • Егор Ивков's avatar
      feat: set max login attempts · a880388e
      Егор Ивков authored and Yaroslav Dynnikov's avatar Yaroslav Dynnikov committed
      a880388e
  5. Nov 09, 2023
  6. Nov 08, 2023
  7. Nov 07, 2023
  8. Nov 06, 2023
    • Kurdakov Alexander's avatar
      feat: add tier entity · 701aa4ab
      Kurdakov Alexander authored
      Transferred replication factor from Properties table to new Tier table
      
      Instance and Replicaset belongs to tier via new field tier in _pico_instance and _pico_replicaset
      
      New cli option init-cfg with path to configuration file in yaml format. For now contains only info about tiers.
      701aa4ab
  9. Nov 03, 2023
  10. Nov 02, 2023
  11. Nov 01, 2023
  12. Oct 31, 2023
    • Dmitry Rodionov's avatar
      refactor: move cli related stuff to src/cli · e8ca68f1
      Dmitry Rodionov authored
      main.rs has grown a bit, adding new stuff to it doesnt feel natural.
      Smaller files are easier to digest. For me it is easier to find stuff
      when there are less files on the top level and some hierarchy shows.
      where to go. A while back I wanted to move sql command to separate
      file but there is already sql.rs on the top level.
      
      This patch solves this issue.
      e8ca68f1
    • Arseniy Volynets's avatar
      3f5acd2c
    • Yaroslav Dynnikov's avatar
      chore: remove tarantool-sys submodule branch · bed353ae
      Yaroslav Dynnikov authored and Georgy Moshkin's avatar Georgy Moshkin committed
      Follow-up for 2b1bd622
      
      > submodule.<name>.branch
      >
      > A remote branch name for tracking updates in the upstream submodule.
      > If the option is not specified, it defaults to the remote HEAD.
      
      The `origin/HEAD` is the default branch in GitLab. In case of
      tarantool-sys nowadays it corresponds to `2.11.0-picodata`.
      
      This option is responsible for the correct operation of
      
          git submodule update --remote tarantool-sys
      bed353ae
  13. Oct 30, 2023
  14. Oct 27, 2023
  15. Oct 26, 2023
  16. Oct 25, 2023
  17. Oct 24, 2023
  18. Oct 23, 2023
Loading