0b3890df46
This patch adds functional testing for the role-based access control (RBAC) "auto-grant" feature, where if a user that is allowed to create a table, it also recieves full permissions over the table it just created. We also test permissions over new materialized views created by a user, and over CDC logs. The test for CDC logs reproduces an already suspected bug, #19798: A user may be allowed to create a table with CDC enabled, but then is not allowed to read the CDC log just created. The tests show that the other cases (base tables and views) do not have this bug, and the creating user does get appropriate permissions over the new table and views. In addition to testing auto-grant, the patch also includes tests for the opposite feature, "auto-revoke" - that permissions are removed when the table/view/cdc is deleted. If we forget to do that while implementing auto-grant, we risk that users may be able to use tables created by other users just because they used the same table _name_ earlier. It's important to have these auto-revoke tests together with the auto-grant tests that reproduce #19798 - so we don't forget this part when finally fixing #19798. Refs #19798. Signed-off-by: Nadav Har'El <nyh@scylladb.com> Closes scylladb/scylladb#19845
Scylla in-source tests.
For details on how to run the tests, see docs/dev/testing.md
Shared C++ utils, libraries are in lib/, for Python - pylib/
alternator - Python tests which connect to a single server and use the DynamoDB API unit, boost, raft - unit tests in C++ cql-pytest - Python tests which connect to a single server and use CQL topology* - tests that set up clusters and add/remove nodes cql - approval tests that use CQL and pre-recorded output rest_api - tests for Scylla REST API Port 9000 scylla-gdb - tests for scylla-gdb.py helper script nodetool - tests for C++ implementation of nodetool
If you can use an existing folder, consider adding your test to it. New folders should be used for new large categories/subsystems, or when the test environment is significantly different from some existing suite, e.g. you plan to start scylladb with different configuration, and you intend to add many tests and would like them to reuse an existing Scylla cluster (clusters can be reused for tests within the same folder).
To add a new folder, create a new directory, and then
copy & edit its suite.ini.