Piotr Smaron a2bbbc6904 auth: forbid modifying system ks by non-superusers ...

Before this patch, granting a user MODIFY permissions on ALL KEYSPACES allowed the user to write to system tables, where the user could also set himself to "superuser" granting him all other permissions. After this patch, MODIFY permissions on ALL KEYSPACES is limited only to non-system keyspaces.

Fixes: scylladb/scylladb#23218

Closes scylladb/scylladb#23219

2025-03-30 16:55:04 +03:00

..

broadcast_tables/experimental

service: do not include unused headers

2025-03-20 11:18:16 +08:00

pager

service: do not include unused headers

2025-03-20 11:18:16 +08:00

paxos

treewide: use angle brackets when including seastar headers

2024-12-20 16:16:28 +02:00

qos

service: do not include unused headers

2025-03-20 11:18:16 +08:00

raft

service: do not include unused headers

2025-03-20 11:18:16 +08:00

address_map.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

cache_hitrate_calculator.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

client_state.cc

auth: forbid modifying system ks by non-superusers

2025-03-30 16:55:04 +03:00

client_state.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

CMakeLists.txt

service: add tablet_virtual_task

2024-11-28 11:42:38 +01:00

endpoint_lifecycle_subscriber.hh

treewide: pass host id to endpoint_lifecycle_subscriber

2025-03-11 12:09:22 +02:00

load_broadcaster.hh

load_meter: move to host id

2025-03-11 12:09:22 +02:00

load_meter.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

maintenance_mode.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

mapreduce_service.cc

Merge 'tree: migrate from boost::remove_if() to the standard library based alternatives' from Kefu Chai

2025-02-11 14:07:48 +02:00

mapreduce_service.hh

service/mapreduce_service: Cancel query when stopping

2025-02-10 20:12:59 +02:00

memory_limiter.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

migration_listener.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

migration_manager.cc

treewide: use host id directly in endpoint state change subscribers

2025-03-11 12:09:22 +02:00

migration_manager.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

misc_services.cc

load_meter: move to host id

2025-03-11 12:09:22 +02:00

query_state.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

session.cc

service: do not include unused headers

2025-03-20 11:18:16 +08:00

session.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

state_id.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

storage_proxy_stats.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

storage_proxy.cc

Merge 'Ignore wrapped exceptions gate_closed_exception and rpc::closed_error when node shuts down.' from Sergey Zolotukhin

2025-03-27 11:39:42 +01:00

storage_proxy.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

storage_service.cc

Merge 'Allow abort during join_cluster' from Benny Halevy

2025-03-26 15:48:58 +03:00

storage_service.hh

Merge 'Allow abort during join_cluster' from Benny Halevy

2025-03-26 15:48:58 +03:00

tablet_allocator_fwd.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

tablet_allocator.cc

service: Introduce rack-aware co-location migrations for tablet merge

2025-03-16 22:45:00 +02:00

tablet_allocator.hh

service: Introduce rack-aware co-location migrations for tablet merge

2025-03-16 22:45:00 +02:00

tablet_operation.hh

service: Add tablet_operation.hh

2025-01-17 16:12:05 +08:00

task_manager_module.cc

service: tasks: hold token_metadata_ptr in tablet_virtual_task

2025-02-19 09:33:53 +02:00

task_manager_module.hh

tasks: replace ip with host_id in task_identity

2025-02-05 10:11:52 +01:00

topology_coordinator.cc

Merge "convert some parts of the gossiper to host ids" from Gleb

2025-03-13 13:36:31 +02:00

topology_coordinator.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

topology_guard.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

topology_mutation.cc

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

topology_mutation.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

topology_state_machine.cc

tree: Remove unused boost headers

2025-02-15 20:32:22 +02:00

topology_state_machine.hh

service: do not include unused headers

2025-03-20 11:18:16 +08:00

view_update_backlog_broker.hh

treewide: pass host id to endpoint state change subscribers

2025-03-11 12:09:22 +02:00