alexey-milovidov
6c9991ae43
Using std::string::starts_with ( #9321 )
...
* Using std::string::starts_with
* Fixed error
* Fixed error
2020-02-24 21:11:21 +03:00
CurtizJ
e5fad6d753
Merge remote-tracking branch 'upstream/master' into alter-ttl
2020-02-23 18:40:42 +03:00
Alexey Milovidov
55787391c6
Merge branch 'master' of github.com:yandex/ClickHouse into amosbird-char8_t
2020-02-23 00:30:19 +03:00
Alexey Milovidov
4c504ffda3
Fixed errors
2020-02-22 22:35:39 +03:00
Alexey Milovidov
c3e80485da
More strict aliasing
2020-02-22 10:19:39 +08:00
Alexey Milovidov
e1b3c58746
More strict aliasing
2020-02-22 10:17:24 +08:00
Vitaly Baranov
c1e870d493
Merge pull request #9182 from vitlibar/RBAC-5.2
...
RBAC-5.2
2020-02-22 03:55:17 +03:00
Vitaly Baranov
6671ca67eb
Add access type ROLE_ADMIN.
2020-02-21 06:03:09 +03:00
Vitaly Baranov
ae18d443c8
Introduce roles.
2020-02-21 06:03:03 +03:00
Vitaly Baranov
fc8aa5efe7
Separate access-controlling access types.
2020-02-21 03:27:29 +03:00
Vitaly Baranov
543587fc46
Remove ATTACH and DETACH access types, check CREATE and DROP access types instead of them.
2020-02-21 03:27:29 +03:00
Vitaly Baranov
4f85c148b5
Move event handling away from Context.
2020-02-21 03:27:23 +03:00
Vitaly Baranov
6cac4a919b
Improve behaviour of row policies, now it applies for a table always when defined for that table (even for another user).
2020-02-21 00:57:42 +03:00
Vitaly Baranov
5849dd2236
Slightly better solution for checking row policy for distributed tables,
...
now it checks both current user's and initial user's filters.
2020-02-21 00:57:42 +03:00
Vitaly Baranov
244c9d5325
Add class GenericRoleSet to represent a set of IDs of users and roles.
2020-02-21 00:57:42 +03:00
Vitaly Baranov
ed2061db8a
Better pointers: std::shared_ptr<const QuotaContext> instead of std::shared_ptr<QuotaContext>, boost::atomic_shared_ptr instead of std::atomic_load/store.
2020-02-21 00:57:42 +03:00
CurtizJ
b0f7905567
better TTL calculations with mutations
2020-02-18 22:03:40 +03:00
Azat Khuzhin
c2d7922413
Drop unused ALL_ADDRESSES const (fixes poco 1.7.6+dfsg1-5+deb9u1)
...
With poco 1.7.6+dfsg1-5+deb9u1:
5 0x00007f9921e48085 in __cxa_throw ()
6 0x00007f9918dfca88 in Poco::Net::IPAddress::IPAddress(void const*, unsigned int, unsigned int) () from /usr/lib/libPocoNet.so.46
7 0x00007f9918dfcf91 in Poco::Net::IPAddress::operator&(Poco::Net::IPAddress const&) const () from /usr/lib/libPocoNet.so.46
8 0x00007f991737a623 in DB::AllowedClientHosts::IPSubnet::set (this=0x7f991742afa0 <DB::(anonymous namespace)::ALL_ADDRESSES>, prefix_=..., mask_=...) at AllowedClientHosts.h:146
9 0x00007f991737a2da in DB::AllowedClientHosts::IPSubnet::IPSubnet (this=0x7f991742afa0 <DB::(anonymous namespace)::ALL_ADDRESSES>, prefix_=..., mask_=...) at AllowedClientHosts.h:24
10 0x00007f991737a0a2 in __static_initialization_and_destruction_0 (__initialize_p=1, __priority=65535) at AllowedClientHosts.cpp:25
Fixes: 2e4174a54c
2020-02-16 21:24:38 +03:00
Vitaly Baranov
c604ce1ca5
Add access_with_grant_option to User.
2020-02-06 18:12:53 +03:00
Vitaly Baranov
08c6061bdf
Add user_id to Context.
2020-02-06 18:12:54 +03:00
Vitaly Baranov
fb3b755599
Fix granting and revoking access rights.
2020-02-06 18:12:53 +03:00
Vitaly Baranov
291b7c277a
Move some part of the Authentication class to header to allow using in the parser.
2020-02-06 18:12:48 +03:00
Vitaly Baranov
1e8f04b571
Add to class AllowedClientHost support for like pattern and for removing.
2020-02-06 15:25:32 +03:00
Vitaly Baranov
63079c40c2
Optimize access checking.
2020-02-01 17:31:25 +03:00
Vitaly Baranov
caeed69fe0
Change access rights dynamically when users.xml is edited.
2020-01-31 20:27:32 +03:00
Vitaly Baranov
10c912dab2
Rewrite the User class to be controlled by AccessControlManager.
2020-01-31 20:27:32 +03:00
Vitaly Baranov
2aa58193c8
Check access rights via new interface.
2020-01-31 20:27:28 +03:00
Vitaly Baranov
9e910222da
Add interfaces to check access rights.
2020-01-31 19:23:33 +03:00
Vitaly Baranov
6a8a69fd0c
Use the generic class ext::scope_guard for subscriptions in IAccessStorage instead of a special class.
2020-01-31 19:23:33 +03:00
Ivan
dec5a50033
Add new config syntax for table filters ( #8381 )
2020-01-10 19:53:47 +03:00
Vitaly Baranov
746dd1a8b7
PolicyInfo::setPolicy() now doesn't throw an excepion on empty filter.
2020-01-08 22:03:10 +07:00
alexey-milovidov
9d651526ca
Merge pull request #8343 from Felixoid/inherit_multiple_profiles
...
Inherit multiple profiles
2019-12-28 06:53:54 +03:00
alexey-milovidov
9f7b56e926
Update SettingsConstraints.cpp
2019-12-28 06:52:21 +03:00
Vitaly Baranov
b75771be61
Merge pull request #7808 from vitlibar/RBAC-3
...
RBAC-3
2019-12-27 09:44:24 +07:00
Mikhail f. Shiryaev
a940a25684
Add a way to set multiple parent profiles
2019-12-26 23:18:21 +01:00
Vitaly Baranov
297a5fd627
Merge pull request #8342 from vitlibar/fix-checks-localhost-is-allowed
...
Fix checks if a client host is allowed in case it's the localhost.
2019-12-23 16:03:29 +03:00
Vitaly Baranov
2e4174a54c
Fix checks if a client host is allowed in case it's the localhost.
2019-12-22 23:24:43 +07:00
alexey-milovidov
0b70706f04
Merge pull request #8241 from vitlibar/fix-allowed-client-hosts-checks
...
Fix checking if a client host is allowed.
2019-12-19 21:09:29 +03:00
Vitaly Baranov
ba328ad48e
Corrections after review.
2019-12-19 17:51:32 +03:00
Vitaly Baranov
9f5ab54fc2
Rework RowPolicy based on IAccessEntity.
2019-12-19 13:37:02 +03:00
Vitaly Baranov
bfcd437e91
Add an integration test.
2019-12-19 03:15:14 +03:00
Vitaly Baranov
2b93cab88f
Fix checking of client hostname.
2019-12-18 16:40:51 +03:00
alexey-milovidov
624be3679b
Merge branch 'master' into mysql
2019-12-09 04:53:30 +03:00
Yuriy
6c8e2d8b85
fixed getting double SHA1 in mysql_native_password auth plugin
2019-12-06 04:35:49 +03:00
Vitaly Baranov
0e21673271
Rework Quota based on IAccessEntity.
2019-12-05 21:03:57 +03:00
Vitaly Baranov
7db6c60bb1
Add AccessControlManager and an interface for the storage.
2019-12-05 21:03:57 +03:00
Yuriy Baranov
67d72f35b9
Update Authentication.cpp
2019-12-05 03:35:52 +03:00
Yuriy
9a222c6a2a
compare with proper variable
2019-12-05 03:23:12 +03:00
Yuriy
4b170ae769
fixed compilation error
2019-12-05 03:19:36 +03:00
Yuriy
dbe7dc1185
using SHA1 MySQL auth plugin for plaintext passwords
2019-12-05 02:30:06 +03:00