security: add object name to "access denied" error messages
Delete specifc access denied error code (ER_FUNCTION_ACCESS_DENIED, ER_SPACE_ACCESS_DENIED, ER_FUNC_ACCESS_DENIED) and always ER_ACCESS_DENIED code, which now contains object name and type Pass operation type (create, drop, grant, revoke) to ER_ACCESS_DENIED. Add a helper function schema_find_name() to schema.[h,cc]. In scope of gh-2911 "add triggers for audit log". Heavily edited by @kostja
Showing
- src/box/alter.cc 63 additions, 29 deletionssrc/box/alter.cc
- src/box/call.cc 6 additions, 5 deletionssrc/box/call.cc
- src/box/errcode.h 4 additions, 4 deletionssrc/box/errcode.h
- src/box/schema.cc 44 additions, 0 deletionssrc/box/schema.cc
- src/box/schema.h 8 additions, 0 deletionssrc/box/schema.h
- src/box/schema_def.c 1 addition, 0 deletionssrc/box/schema_def.c
- src/box/sequence.c 5 additions, 4 deletionssrc/box/sequence.c
- src/box/session.cc 3 additions, 2 deletionssrc/box/session.cc
- src/box/space.c 5 additions, 4 deletionssrc/box/space.c
- src/box/user_def.c 20 additions, 26 deletionssrc/box/user_def.c
- src/box/user_def.h 5 additions, 1 deletionsrc/box/user_def.h
- src/box/wal.cc 1 addition, 1 deletionsrc/box/wal.cc
- src/trivia/util.h 0 additions, 2 deletionssrc/trivia/util.h
- test/box-py/iproto.result 1 addition, 1 deletiontest/box-py/iproto.result
- test/box/access.result 18 additions, 18 deletionstest/box/access.result
- test/box/access_bin.result 8 additions, 8 deletionstest/box/access_bin.result
- test/box/access_escalation.result 1 addition, 1 deletiontest/box/access_escalation.result
- test/box/access_misc.result 27 additions, 27 deletionstest/box/access_misc.result
- test/box/access_sysview.result 5 additions, 5 deletionstest/box/access_sysview.result
- test/box/misc.result 31 additions, 34 deletionstest/box/misc.result
Loading
Please register or sign in to comment