From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id A9DFD251F7 for ; Thu, 17 May 2018 12:15:29 -0400 (EDT) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QlpQJCa_xZtv for ; Thu, 17 May 2018 12:15:29 -0400 (EDT) Received: from smtp46.i.mail.ru (smtp46.i.mail.ru [94.100.177.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTPS id 65C83251F0 for ; Thu, 17 May 2018 12:15:28 -0400 (EDT) From: Ilya Markov Subject: [tarantool-patches] [security 0/2] Access control lists Date: Thu, 17 May 2018 19:15:15 +0300 Message-Id: In-Reply-To: <20180516192726.GB9640@atlas> References: <20180516192726.GB9640@atlas> Sender: tarantool-patches-bounce@freelists.org Errors-to: tarantool-patches-bounce@freelists.org Reply-To: tarantool-patches@freelists.org List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: tarantool-patches List-subscribe: List-owner: List-post: List-archive: To: kostja@tarantool.org Cc: georgy@tarantool.org, tarantool-patches@freelists.org Ilya Markov (2): security: Refactor reads from systems spaces security: Refactor system space access checks branch: gh-3250-system-space-access src/box/alter.cc | 156 ++++++++++++++++++----------- src/box/lua/schema.lua | 97 ++++++++++-------- src/box/schema.cc | 90 +++++++++++++++++ src/box/schema.h | 10 ++ src/box/space.c | 3 +- src/box/space.h | 17 +++- src/box/sysview_engine.c | 1 + src/box/sysview_index.c | 78 ++++++++++----- test/box/access.result | 192 +++++++++++++++++++++++++++++------- test/box/access.test.lua | 86 +++++++++++----- test/box/access_bin.result | 2 +- test/box/access_bin.test.lua | 2 +- test/box/access_escalation.result | 41 +++++++- test/box/access_escalation.test.lua | 17 +++- test/box/access_misc.result | 76 ++++++++++++-- test/box/access_misc.test.lua | 24 ++++- test/box/access_sysview.result | 11 ++- test/box/access_sysview.test.lua | 6 +- test/box/ddl.result | 4 + test/box/ddl.test.lua | 2 + test/box/net.box.result | 10 +- test/box/net.box.test.lua | 6 +- test/box/on_replace.result | 8 +- test/box/role.result | 27 ++++- test/box/role.test.lua | 13 ++- test/box/sequence.result | 22 +++-- test/box/sequence.test.lua | 13 +-- test/box/transaction.result | 18 +++- test/box/transaction.test.lua | 4 + test/engine/iterator.result | 2 +- test/engine/savepoint.result | 12 +-- test/engine/truncate.result | 2 +- 32 files changed, 793 insertions(+), 259 deletions(-) -- 2.7.4