mirror of
https://github.com/scylladb/scylladb.git
synced 2026-04-26 19:35:12 +00:00
fcb8d040e8
Instead of lengthy blurbs, switch to single-line, machine-readable standardized (https://spdx.dev) license identifiers. The Linux kernel switched long ago, so there is strong precedent. Three cases are handled: AGPL-only, Apache-only, and dual licensed. For the latter case, I chose (AGPL-3.0-or-later and Apache-2.0), reasoning that our changes are extensive enough to apply our license. The changes we applied mechanically with a script, except to licenses/README.md. Closes #9937
98 lines
2.8 KiB
C++
98 lines
2.8 KiB
C++
/*
|
|
* Copyright (C) 2017-present ScyllaDB
|
|
*/
|
|
|
|
/*
|
|
* SPDX-License-Identifier: AGPL-3.0-or-later
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include "auth/role_manager.hh"
|
|
|
|
#include <string_view>
|
|
#include <unordered_set>
|
|
|
|
#include <seastar/core/abort_source.hh>
|
|
#include <seastar/core/future.hh>
|
|
#include <seastar/core/sstring.hh>
|
|
|
|
#include "seastarx.hh"
|
|
|
|
namespace cql3 {
|
|
class query_processor;
|
|
}
|
|
|
|
namespace service {
|
|
class migration_manager;
|
|
}
|
|
|
|
namespace auth {
|
|
|
|
class standard_role_manager final : public role_manager {
|
|
cql3::query_processor& _qp;
|
|
::service::migration_manager& _migration_manager;
|
|
future<> _stopped;
|
|
seastar::abort_source _as;
|
|
|
|
public:
|
|
standard_role_manager(cql3::query_processor& qp, ::service::migration_manager& mm)
|
|
: _qp(qp)
|
|
, _migration_manager(mm)
|
|
, _stopped(make_ready_future<>()) {
|
|
}
|
|
|
|
virtual std::string_view qualified_java_name() const noexcept override;
|
|
|
|
virtual const resource_set& protected_resources() const override;
|
|
|
|
virtual future<> start() override;
|
|
|
|
virtual future<> stop() override;
|
|
|
|
virtual future<> create(std::string_view role_name, const role_config&) override;
|
|
|
|
virtual future<> drop(std::string_view role_name) override;
|
|
|
|
virtual future<> alter(std::string_view role_name, const role_config_update&) override;
|
|
|
|
virtual future<> grant(std::string_view grantee_name, std::string_view role_name) override;
|
|
|
|
virtual future<> revoke(std::string_view revokee_name, std::string_view role_name) override;
|
|
|
|
virtual future<role_set> query_granted(std::string_view grantee_name, recursive_role_query) override;
|
|
|
|
virtual future<role_set> query_all() override;
|
|
|
|
virtual future<bool> exists(std::string_view role_name) override;
|
|
|
|
virtual future<bool> is_superuser(std::string_view role_name) override;
|
|
|
|
virtual future<bool> can_login(std::string_view role_name) override;
|
|
|
|
virtual future<std::optional<sstring>> get_attribute(std::string_view role_name, std::string_view attribute_name) override;
|
|
|
|
virtual future<role_manager::attribute_vals> query_attribute_for_all(std::string_view attribute_name) override;
|
|
|
|
virtual future<> set_attribute(std::string_view role_name, std::string_view attribute_name, std::string_view attribute_value) override;
|
|
|
|
virtual future<> remove_attribute(std::string_view role_name, std::string_view attribute_name) override;
|
|
|
|
private:
|
|
enum class membership_change { add, remove };
|
|
|
|
future<> create_metadata_tables_if_missing() const;
|
|
|
|
bool legacy_metadata_exists();
|
|
|
|
future<> migrate_legacy_metadata() const;
|
|
|
|
future<> create_default_role_if_missing() const;
|
|
|
|
future<> create_or_replace(std::string_view role_name, const role_config&) const;
|
|
|
|
future<> modify_membership(std::string_view role_name, std::string_view grantee_name, membership_change) const;
|
|
};
|
|
|
|
}
|