Piotr Smaron a17dd4d4c9 [Backport 2025.1] auth: forbid modifying system ks by non-superusers ...

Before this patch, granting a user MODIFY permissions on ALL KEYSPACES allowed the user to write to system tables, where the user could also set himself to "superuser" granting him all other permissions. After this patch, MODIFY permissions on ALL KEYSPACES is limited only to non-system keyspaces.

Fixes: scylladb/scylladb#23218
(cherry picked from commit fee50f287c)

Parent PR: #23219

Closes scylladb/scylladb#23594

2025-04-06 15:10:06 +03:00

..

broadcast_tables/experimental

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

pager

service: query_pager: fix last-position for filtering queries

2025-02-13 09:40:05 +02:00

paxos

treewide: use angle brackets when including seastar headers

2024-12-20 16:16:28 +02:00

qos

raft topology: Add support for raft topology system tables initialization to happen before group0 initialization

2025-02-20 21:21:31 +00:00

raft

Merge '[Backport 2025.1] raft topology: Add support for raft topology init to happen before group0 initialization' from Scylladb[bot]

2025-04-01 11:46:15 +02:00

address_map.hh

service: address_map: add lookup function that expects address to exist

2025-01-15 16:30:28 +02:00

cache_hitrate_calculator.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

client_state.cc

[Backport 2025.1] auth: forbid modifying system ks by non-superusers

2025-04-06 15:10:06 +03:00

client_state.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

CMakeLists.txt

service: add tablet_virtual_task

2024-11-28 11:42:38 +01:00

endpoint_lifecycle_subscriber.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

load_broadcaster.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

load_meter.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

maintenance_mode.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

mapreduce_service.cc

cql3: allow SELECT of specific collection key

2024-12-30 17:05:20 +02:00

mapreduce_service.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

memory_limiter.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

migration_listener.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

migration_manager.cc

Merge 'Cache base info for view schemas in the schema registry' from Wojciech Mitros

2025-01-21 00:17:54 +01:00

migration_manager.hh

raft topology: Add support for raft topology system tables initialization to happen before group0 initialization

2025-02-20 21:21:31 +00:00

misc_services.cc

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

query_state.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

session.cc

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

session.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

state_id.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

storage_proxy_stats.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

storage_proxy.cc

db/hints: Cancel draining when stopping node

2025-04-03 09:09:05 +02:00

storage_proxy.hh

db/hints: Cancel draining when stopping node

2025-04-03 09:09:05 +02:00

storage_service.cc

Merge '[Backport 2025.1] tablets: Make load balancing capacity-aware' from Tomasz Grabiec

2025-04-01 20:31:05 +02:00

storage_service.hh

Merge '[Backport 2025.1] tablets: Make load balancing capacity-aware' from Tomasz Grabiec

2025-04-01 20:31:05 +02:00

tablet_allocator_fwd.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

tablet_allocator.cc

Merge 'tablets: Make load balancing capacity-aware' from Tomasz Grabiec

2025-03-25 23:16:35 +01:00

tablet_allocator.hh

service: Introduce rack-aware co-location migrations for tablet merge

2025-03-14 20:02:33 +01:00

tablet_operation.hh

service: Add tablet_operation.hh

2025-01-17 16:12:05 +08:00

task_manager_module.cc

service: use read barrier in tablet_virtual_task::contains

2025-02-06 10:07:51 +02:00

task_manager_module.hh

service: retrun status_helper struct from tablet_virtual_task::get_status_helper

2025-01-10 10:03:08 +01:00

topology_coordinator.cc

Merge '[Backport 2025.1] tablets: Make load balancing capacity-aware' from Tomasz Grabiec

2025-04-01 20:31:05 +02:00

topology_coordinator.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

topology_guard.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

topology_mutation.cc

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

topology_mutation.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00

topology_state_machine.cc

Merge 'test: tablets_test: Create proper schema in load balancer tests' from Tomasz Grabiec

2025-03-13 14:08:30 +01:00

topology_state_machine.hh

Merge 'test: tablets_test: Create proper schema in load balancer tests' from Tomasz Grabiec

2025-03-13 14:08:30 +01:00

view_update_backlog_broker.hh

treewide: relicense to ScyllaDB-Source-Available-1.0

2024-12-18 17:45:13 +02:00