From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp38.i.mail.ru (smtp38.i.mail.ru [94.100.177.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dev.tarantool.org (Postfix) with ESMTPS id 7C1DA452566 for ; Sat, 2 Nov 2019 00:36:48 +0300 (MSK) From: Vladislav Shpilevoy Date: Fri, 1 Nov 2019 22:42:23 +0100 Message-Id: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: [Tarantool-patches] [PATCH 0/2] Admin universe access List-Id: Tarantool development patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: tarantool-patches@dev.tarantool.org, kostja.osipov@gmail.com The patchset makes so the admin user never can loose its universe access rights. Apparently, Tarantool can't even bootstrap nor recovery without universe granted to the admin, because this user owns the fibers doing recovery and bootstrap. First patch fixes the problem, which was revealed by the online credentials update patch. Appeared, that admin user is very fragile, and any update of its rights, before universe was recovered, led to recovery/bootstrap error. The second patch makes it impossible to break the admin user explicitly. Branch: http://github.com/tarantool/tarantool/tree/gerold103/gh-4606-replication-universe-v4 Issue: https://github.com/tarantool/tarantool/issues/4606 Vladislav Shpilevoy (2): replication: don't drop admin super privileges access: forbid to drop admin's universe access src/box/session.cc | 23 ------- src/box/user.cc | 28 +++++++++ test/box/access.result | 8 +++ test/box/access.test.lua | 6 ++ test/replication/gh-4606-admin-creds.result | 63 +++++++++++++++++++ test/replication/gh-4606-admin-creds.test.lua | 26 ++++++++ test/replication/suite.cfg | 1 + 7 files changed, 132 insertions(+), 23 deletions(-) create mode 100644 test/replication/gh-4606-admin-creds.result create mode 100644 test/replication/gh-4606-admin-creds.test.lua -- 2.21.0 (Apple Git-122.2)