a8175ce5c6
Because keyspace is part of the query when we migrate from v1 to v2 query should change otherwise code would operate on old keyspace if those statics were initialized. Likewise keyspace name can no longer be class field initialized in constructor as it can change during class lifetime.
88 lines
3.7 KiB
C++
88 lines
3.7 KiB
C++
/*
|
|
* Copyright 2016-present ScyllaDB
|
|
*
|
|
* Modified by ScyllaDB
|
|
*/
|
|
|
|
/*
|
|
* SPDX-License-Identifier: (AGPL-3.0-or-later and Apache-2.0)
|
|
*/
|
|
|
|
#include "list_users_statement.hh"
|
|
#include "cql3/query_processor.hh"
|
|
#include "cql3/query_options.hh"
|
|
#include "cql3/column_identifier.hh"
|
|
#include "auth/common.hh"
|
|
#include "transport/messages/result_message.hh"
|
|
|
|
std::unique_ptr<cql3::statements::prepared_statement> cql3::statements::list_users_statement::prepare(
|
|
data_dictionary::database db, cql_stats& stats) {
|
|
return std::make_unique<prepared_statement>(::make_shared<list_users_statement>(*this));
|
|
}
|
|
|
|
future<> cql3::statements::list_users_statement::check_access(query_processor& qp, const service::client_state& state) const {
|
|
state.ensure_not_anonymous();
|
|
return make_ready_future();
|
|
}
|
|
|
|
future<::shared_ptr<cql_transport::messages::result_message>>
|
|
cql3::statements::list_users_statement::execute(query_processor& qp, service::query_state& state, const query_options& options, std::optional<service::group0_guard> guard) const {
|
|
static const sstring virtual_table_name("users");
|
|
|
|
const auto make_column_spec = [auth_ks = auth::get_auth_ks_name(qp)](const sstring& name, const ::shared_ptr<const abstract_type>& ty) {
|
|
return make_lw_shared<column_specification>(
|
|
auth_ks,
|
|
virtual_table_name,
|
|
::make_shared<column_identifier>(name, true),
|
|
ty);
|
|
};
|
|
|
|
auto metadata = ::make_shared<cql3::metadata>(
|
|
std::vector<lw_shared_ptr<column_specification>>{
|
|
make_column_spec("name", utf8_type),
|
|
make_column_spec("super", boolean_type)});
|
|
|
|
auto make_results = [metadata = std::move(metadata)](const auth::service& as, std::unordered_set<sstring>&& roles) mutable {
|
|
using cql_transport::messages::result_message;
|
|
|
|
auto results = std::make_unique<result_set>(std::move(metadata));
|
|
|
|
std::vector<sstring> sorted_roles(roles.cbegin(), roles.cend());
|
|
std::sort(sorted_roles.begin(), sorted_roles.end());
|
|
|
|
return do_with(
|
|
std::move(sorted_roles),
|
|
std::move(results),
|
|
[&as](const std::vector<sstring>& sorted_roles, std::unique_ptr<result_set>& results) {
|
|
return do_for_each(sorted_roles, [&as, &results](const sstring& role) {
|
|
return when_all_succeed(
|
|
as.has_superuser(role),
|
|
as.underlying_role_manager().can_login(role)).then_unpack([&results, &role](bool super, bool login) {
|
|
if (login) {
|
|
results->add_column_value(utf8_type->decompose(role));
|
|
results->add_column_value(boolean_type->decompose(super));
|
|
}
|
|
});
|
|
}).then([&results] {
|
|
return make_ready_future<::shared_ptr<result_message>>(::make_shared<result_message::rows>(
|
|
result(std::move(results))));
|
|
});
|
|
});
|
|
};
|
|
|
|
const auto& cs = state.get_client_state();
|
|
const auto& as = *cs.get_auth_service();
|
|
|
|
return auth::has_superuser(as, *cs.user()).then([&cs, &as, make_results = std::move(make_results)](bool has_superuser) mutable {
|
|
if (has_superuser) {
|
|
return as.underlying_role_manager().query_all().then([&as, make_results = std::move(make_results)](std::unordered_set<sstring> roles) mutable {
|
|
return make_results(as, std::move(roles));
|
|
});
|
|
}
|
|
|
|
return auth::get_roles(as, *cs.user()).then([&as, make_results = std::move(make_results)](std::unordered_set<sstring> granted_roles) mutable {
|
|
return make_results(as, std::move(granted_roles));
|
|
});
|
|
});
|
|
}
|