[Tarantool-patches] [PATCH 0/2] Admin universe access

Kirill Yukhin kyukhin at tarantool.org
Tue Nov 12 12:37:37 MSK 2019


Hello,

On 01 ноя 22:42, Vladislav Shpilevoy wrote:
> The patchset makes so the admin user never can loose its universe
> access rights. Apparently, Tarantool can't even bootstrap nor
> recovery without universe granted to the admin, because this user
> owns the fibers doing recovery and bootstrap.
> 
> First patch fixes the problem, which was revealed by the online
> credentials update patch. Appeared, that admin user is very
> fragile, and any update of its rights, before universe was
> recovered, led to recovery/bootstrap error.
> 
> The second patch makes it impossible to break the admin user
> explicitly.
> 
> Branch: http://github.com/tarantool/tarantool/tree/gerold103/gh-4606-replication-universe-v4
> Issue: https://github.com/tarantool/tarantool/issues/4606
> 
> Vladislav Shpilevoy (2):
>   replication: don't drop admin super privileges

I've checked the patch into 1.10, 2.1, 2.2 and master.

>   access: forbid to drop admin's universe access

I've checked the patch into master.

--
Regards, Kirill Yukhin


More information about the Tarantool-patches mailing list