Skip to content
Snippets Groups Projects
  1. Dec 17, 2014
  2. Dec 16, 2014
  3. Dec 15, 2014
  4. Dec 11, 2014
    • Konstantin Osipov's avatar
      gh-323: roles · 43680f9f
      Konstantin Osipov authored
      Implement granted privilege cache in struct user.
      
      Reload user privileges from system spaces and
      rebuild the cache whenever a grant or revoke occurs..
      
      Implement revoking privileges from a role.
      Basic tests pass.
      
      Do not rebuild the privilege cache of objects
      for which it can't have changed with a grant
      or revoke.
      
      Optimize rebuild_effective_grants().
      
      Make role.test idempotent.
      
      Make grant and revoke robust to malformed arguments.
      Fix bugs in schema.lua, related to incorrect arguments
      for grant/revoke.
      43680f9f
  5. Dec 10, 2014
  6. Dec 01, 2014
  7. Nov 27, 2014
    • Konstantin Osipov's avatar
      Roles (partial implementation). · 61c2948c
      Konstantin Osipov authored
      Track granted roles.
      Represent roles granted to a user with a bitmap.
      Disallow loops in role grants.
      Add tests for box.schema.user.grant('username', 'rolename')
      Add basic tests for loops in grant sequences.
      
      Rewrite largely buggy code in authentication token lookup.
      Do not waste space on authentication token bitmap, correctly
      check for overflow of the bitmap.
      61c2948c
    • Dmitry Simonenko's avatar
      sophia: fix box/admin.test · 7e591afc
      Dmitry Simonenko authored
      7e591afc
  8. Nov 24, 2014
  9. Nov 21, 2014
  10. Nov 18, 2014
  11. Nov 17, 2014
  12. Nov 12, 2014
    • Konstantin Osipov's avatar
      A fix for gh-617 - add a separate fiber key for the current user. · fabb121c
      Konstantin Osipov authored
      Use cached user credentials for global access checks and store
      them in a separate fiber key.
      
      This fixes gh-617 and speeds up privilege checks.
      
      @todo: we need to add a linked list of all user sessions
      to the user cache, as well as all user setuid functions.
      These lists could be used to update privilege cache,
      get/update per-user statistics, disconnect sessions
      of a dropped user.
      fabb121c
  13. Nov 07, 2014
  14. Oct 25, 2014
  15. Oct 24, 2014
  16. Oct 23, 2014
  17. Oct 20, 2014
  18. Oct 19, 2014
  19. Oct 13, 2014
  20. Oct 09, 2014
  21. Oct 03, 2014
  22. Oct 02, 2014
  23. Oct 01, 2014
Loading