Commit Graph

55 Commits

Author SHA1 Message Date
alexey-milovidov
6c9991ae43
Using std::string::starts_with (#9321)
* Using std::string::starts_with

* Fixed error

* Fixed error
2020-02-24 21:11:21 +03:00
CurtizJ
e5fad6d753 Merge remote-tracking branch 'upstream/master' into alter-ttl 2020-02-23 18:40:42 +03:00
Alexey Milovidov
55787391c6 Merge branch 'master' of github.com:yandex/ClickHouse into amosbird-char8_t 2020-02-23 00:30:19 +03:00
Alexey Milovidov
4c504ffda3 Fixed errors 2020-02-22 22:35:39 +03:00
Alexey Milovidov
c3e80485da
More strict aliasing 2020-02-22 10:19:39 +08:00
Alexey Milovidov
e1b3c58746
More strict aliasing 2020-02-22 10:17:24 +08:00
Vitaly Baranov
c1e870d493
Merge pull request #9182 from vitlibar/RBAC-5.2
RBAC-5.2
2020-02-22 03:55:17 +03:00
Vitaly Baranov
6671ca67eb Add access type ROLE_ADMIN. 2020-02-21 06:03:09 +03:00
Vitaly Baranov
ae18d443c8 Introduce roles. 2020-02-21 06:03:03 +03:00
Vitaly Baranov
fc8aa5efe7 Separate access-controlling access types. 2020-02-21 03:27:29 +03:00
Vitaly Baranov
543587fc46 Remove ATTACH and DETACH access types, check CREATE and DROP access types instead of them. 2020-02-21 03:27:29 +03:00
Vitaly Baranov
4f85c148b5 Move event handling away from Context. 2020-02-21 03:27:23 +03:00
Vitaly Baranov
6cac4a919b Improve behaviour of row policies, now it applies for a table always when defined for that table (even for another user). 2020-02-21 00:57:42 +03:00
Vitaly Baranov
5849dd2236 Slightly better solution for checking row policy for distributed tables,
now it checks both current user's and initial user's filters.
2020-02-21 00:57:42 +03:00
Vitaly Baranov
244c9d5325 Add class GenericRoleSet to represent a set of IDs of users and roles. 2020-02-21 00:57:42 +03:00
Vitaly Baranov
ed2061db8a Better pointers: std::shared_ptr<const QuotaContext> instead of std::shared_ptr<QuotaContext>, boost::atomic_shared_ptr instead of std::atomic_load/store. 2020-02-21 00:57:42 +03:00
CurtizJ
b0f7905567 better TTL calculations with mutations 2020-02-18 22:03:40 +03:00
Azat Khuzhin
c2d7922413 Drop unused ALL_ADDRESSES const (fixes poco 1.7.6+dfsg1-5+deb9u1)
With poco 1.7.6+dfsg1-5+deb9u1:
  5  0x00007f9921e48085 in __cxa_throw ()
  6  0x00007f9918dfca88 in Poco::Net::IPAddress::IPAddress(void const*, unsigned int, unsigned int) () from /usr/lib/libPocoNet.so.46
  7  0x00007f9918dfcf91 in Poco::Net::IPAddress::operator&(Poco::Net::IPAddress const&) const () from /usr/lib/libPocoNet.so.46
  8  0x00007f991737a623 in DB::AllowedClientHosts::IPSubnet::set (this=0x7f991742afa0 <DB::(anonymous namespace)::ALL_ADDRESSES>, prefix_=..., mask_=...) at AllowedClientHosts.h:146
  9  0x00007f991737a2da in DB::AllowedClientHosts::IPSubnet::IPSubnet (this=0x7f991742afa0 <DB::(anonymous namespace)::ALL_ADDRESSES>, prefix_=..., mask_=...) at AllowedClientHosts.h:24
  10 0x00007f991737a0a2 in __static_initialization_and_destruction_0 (__initialize_p=1, __priority=65535) at AllowedClientHosts.cpp:25

Fixes: 2e4174a54c
2020-02-16 21:24:38 +03:00
Vitaly Baranov
c604ce1ca5 Add access_with_grant_option to User. 2020-02-06 18:12:53 +03:00
Vitaly Baranov
08c6061bdf Add user_id to Context. 2020-02-06 18:12:54 +03:00
Vitaly Baranov
fb3b755599 Fix granting and revoking access rights. 2020-02-06 18:12:53 +03:00
Vitaly Baranov
291b7c277a Move some part of the Authentication class to header to allow using in the parser. 2020-02-06 18:12:48 +03:00
Vitaly Baranov
1e8f04b571 Add to class AllowedClientHost support for like pattern and for removing. 2020-02-06 15:25:32 +03:00
Vitaly Baranov
63079c40c2 Optimize access checking. 2020-02-01 17:31:25 +03:00
Vitaly Baranov
caeed69fe0 Change access rights dynamically when users.xml is edited. 2020-01-31 20:27:32 +03:00
Vitaly Baranov
10c912dab2 Rewrite the User class to be controlled by AccessControlManager. 2020-01-31 20:27:32 +03:00
Vitaly Baranov
2aa58193c8 Check access rights via new interface. 2020-01-31 20:27:28 +03:00
Vitaly Baranov
9e910222da Add interfaces to check access rights. 2020-01-31 19:23:33 +03:00
Vitaly Baranov
6a8a69fd0c Use the generic class ext::scope_guard for subscriptions in IAccessStorage instead of a special class. 2020-01-31 19:23:33 +03:00
Ivan
dec5a50033
Add new config syntax for table filters (#8381) 2020-01-10 19:53:47 +03:00
Vitaly Baranov
746dd1a8b7 PolicyInfo::setPolicy() now doesn't throw an excepion on empty filter. 2020-01-08 22:03:10 +07:00
alexey-milovidov
9d651526ca
Merge pull request #8343 from Felixoid/inherit_multiple_profiles
Inherit multiple profiles
2019-12-28 06:53:54 +03:00
alexey-milovidov
9f7b56e926
Update SettingsConstraints.cpp 2019-12-28 06:52:21 +03:00
Vitaly Baranov
b75771be61
Merge pull request #7808 from vitlibar/RBAC-3
RBAC-3
2019-12-27 09:44:24 +07:00
Mikhail f. Shiryaev
a940a25684
Add a way to set multiple parent profiles 2019-12-26 23:18:21 +01:00
Vitaly Baranov
297a5fd627
Merge pull request #8342 from vitlibar/fix-checks-localhost-is-allowed
Fix checks if a client host is allowed in case it's the localhost.
2019-12-23 16:03:29 +03:00
Vitaly Baranov
2e4174a54c Fix checks if a client host is allowed in case it's the localhost. 2019-12-22 23:24:43 +07:00
alexey-milovidov
0b70706f04
Merge pull request #8241 from vitlibar/fix-allowed-client-hosts-checks
Fix checking if a client host is allowed.
2019-12-19 21:09:29 +03:00
Vitaly Baranov
ba328ad48e Corrections after review. 2019-12-19 17:51:32 +03:00
Vitaly Baranov
9f5ab54fc2 Rework RowPolicy based on IAccessEntity. 2019-12-19 13:37:02 +03:00
Vitaly Baranov
bfcd437e91 Add an integration test. 2019-12-19 03:15:14 +03:00
Vitaly Baranov
2b93cab88f Fix checking of client hostname. 2019-12-18 16:40:51 +03:00
alexey-milovidov
624be3679b
Merge branch 'master' into mysql 2019-12-09 04:53:30 +03:00
Yuriy
6c8e2d8b85 fixed getting double SHA1 in mysql_native_password auth plugin 2019-12-06 04:35:49 +03:00
Vitaly Baranov
0e21673271 Rework Quota based on IAccessEntity. 2019-12-05 21:03:57 +03:00
Vitaly Baranov
7db6c60bb1 Add AccessControlManager and an interface for the storage. 2019-12-05 21:03:57 +03:00
Yuriy Baranov
67d72f35b9
Update Authentication.cpp 2019-12-05 03:35:52 +03:00
Yuriy
9a222c6a2a compare with proper variable 2019-12-05 03:23:12 +03:00
Yuriy
4b170ae769 fixed compilation error 2019-12-05 03:19:36 +03:00
Yuriy
dbe7dc1185 using SHA1 MySQL auth plugin for plaintext passwords 2019-12-05 02:30:06 +03:00