Nadav Har'El f9ff475dfb alternator: add RBAC enforcement to GetRecords ...

This patch adds a requirement for the "SELECT" permission on a table to
run a GetRecords on it (the DynamoDB Streams API, i.e., CDC).

The grant is checked on the *CDC log table* - not on the base table,
which allows giving a role the ability to read the base but not is
change stream, or vice versa.

The operations ListStreams, DescribeStreams, GetShardIterators do not
require any permissions to run - they do not read any data, and are
(in my opinion) similar in spirit to DescribeTable, so I think it's fine
not to require any permissions for them.

A test is also added.

Signed-off-by: Nadav Har'El <nyh@scylladb.com>

2024-08-19 09:57:53 +02:00

..

auth.cc

alternator: do not allow authentication with a non-"login" role

2024-07-24 08:20:23 +02:00

auth.hh

alternator: add support for auth-v2

2024-03-01 16:25:14 +01:00

CMakeLists.txt

build: bring abseil submodule back

2024-05-05 23:31:09 +03:00

conditions.cc

alternator: not include unused headers

2024-01-12 10:53:32 +02:00

conditions.hh

alternator: not include unused headers

2024-01-12 10:53:32 +02:00

controller.cc

code: Switch to sched group in request_stop_server()

2024-05-24 18:00:01 +03:00

controller.hh

code: Add scheduling group to controllers

2024-05-24 17:53:16 +03:00

error.hh

Typos: fix typos in comments

2023-12-02 22:37:22 +02:00

executor.cc

alternator: add RBAC enforcement to TagResource and UntagResource

2024-08-19 09:57:53 +02:00

executor.hh

alternator: do not include unused headers

2024-06-07 07:45:00 +08:00

expressions_types.hh

alternator: drop unused friend declaration

2024-06-14 09:58:09 +03:00

expressions.cc

treewide: replace std::result_of_t with std::invoke_result_t

2024-05-26 16:45:42 +03:00

expressions.g

alternator: limit expression length and recursion depth

2023-07-31 08:57:54 +03:00

expressions.hh

alternator: add formatter for alternator::calculate_value_caller

2024-02-11 11:49:46 +02:00

rmw_operation.hh

Typos: fix typos in comments

2023-12-02 22:37:22 +02:00

serialization.cc

alternator: not include unused headers

2024-01-12 10:53:32 +02:00

serialization.hh

alternator: add validation of numbers' magnitude and precision

2023-05-02 11:04:05 +03:00

server.cc

alternator: stop using an "internal" client_state

2024-08-19 09:45:22 +02:00

server.hh

alternator: stop using an "internal" client_state

2024-08-19 09:45:22 +02:00

stats.cc

Add metrics for Alternator get and write batch operations

2024-08-18 12:09:46 +03:00

stats.hh

Add metrics for Alternator get and write batch operations

2024-08-18 12:09:46 +03:00

streams.cc

alternator: add RBAC enforcement to GetRecords

2024-08-19 09:57:53 +02:00

ttl.cc

alternator: add RBAC enforcement to UpdateTimeToLive

2024-08-19 09:57:53 +02:00

ttl.hh

alternator: ttl: pass gossiper& to expiration_service

2022-08-04 12:12:43 +02:00