/* * Copyright (C) 2021-present ScyllaDB */ /* * SPDX-License-Identifier: LicenseRef-ScyllaDB-Source-Available-1.0 */ #include "seastarx.hh" #include "auth/service.hh" #include "cql3/statements/attach_service_level_statement.hh" #include "service/qos/service_level_controller.hh" #include "exceptions/exceptions.hh" #include "transport/messages/result_message.hh" #include "service/client_state.hh" #include "service/query_state.hh" #include "cql3/query_processor.hh" namespace cql3 { namespace statements { attach_service_level_statement::attach_service_level_statement(sstring service_level, sstring role_name) : _service_level(service_level), _role_name(role_name) { } bool attach_service_level_statement::needs_guard(query_processor& qp, service::query_state& state) const { return !auth::legacy_mode(qp) || state.get_service_level_controller().is_v2(); } std::unique_ptr cql3::statements::attach_service_level_statement::prepare( data_dictionary::database db, cql_stats &stats) { return std::make_unique(audit_info(), ::make_shared(*this)); } future<> attach_service_level_statement::check_access(query_processor& qp, const service::client_state &state) const { return state.ensure_has_permission(auth::command_desc{.permission = auth::permission::AUTHORIZE, .resource = auth::root_service_level_resource()}); } future<::shared_ptr> attach_service_level_statement::execute(query_processor& qp, service::query_state &state, const query_options &, std::optional guard) const { if (_service_level == qos::service_level_controller::default_service_level_name) { sstring reason = seastar::format("The default service level, {}, cannot be " "attached to a role. If you want to detach an attached service level, " "use the DETACH SERVICE LEVEL statement", qos::service_level_controller::default_service_level_name); throw exceptions::invalid_request_exception(std::move(reason)); } auto sli = co_await state.get_service_level_controller().get_distributed_service_level(_service_level); if (sli.empty()) { throw qos::nonexistant_service_level_exception(_service_level); } auto& as = *state.get_client_state().get_auth_service(); auto& sl = state.get_service_level_controller(); service::group0_batch mc{std::move(guard)}; co_await auth::set_attribute(as, _role_name, "service_level", _service_level, mc); co_await sl.commit_mutations(std::move(mc)); using void_result_msg = cql_transport::messages::result_message::void_message; using result_msg = cql_transport::messages::result_message; co_return ::static_pointer_cast(make_shared()); } } }