Technical task
Attachments
Issue Links
- relates to
-
MB-22942 Create audit trail for privilege debug
-
- Closed
-
Tracking memcached changes needed for RBAC in spock
People
-
Trond Norbye
-
- Votes:
-
0 Vote for this issue
- Watchers:
-
3 Start watching this issue
Dates
- Created:
- Updated:
- Resolved:
Gerrit Reviews
There are no open Gerrit changes
Show
There are 83 closed Gerrit changes
Hide
There are 83 closed Gerrit changes
- MB-19339: Search and locate LDAP
- Gerrit Review:
- MB-19339: Refactor RBAC handling in memcached
- Gerrit Review:
- MB-19339: Don't treat missing LDAP libs as fatal for EE
- Gerrit Review:
- MB-19339: Add check_privilege to the engine mock
- Gerrit Review:
- MB-19339: Add ENGINE_AUTH_STALE as error code
- Gerrit Review:
- MB-19339: Split TAP into Producer and Consumer
- Gerrit Review:
- MB-19339: Use privilege check instead if isAdmin for stats
- Gerrit Review:
- MB-19339: Add IdleConnection privilege
- Gerrit Review:
- MB-19339: Split DCP into Producer and Consumer
- Gerrit Review:
- MB-19339: Add privilege to manage collections
- Gerrit Review:
- MB-19339: Add privilege database in memcached (very WIP)
- Gerrit Review:
- MB-19339: Add privilege database in memcached
- Gerrit Review:
- MB-19339: Remove "_admin"
- Gerrit Review:
- MB-19339: Refactor: move get_cmd_timers to steppable pattern
- Gerrit Review:
- MB-19339: Make RBAC data mandatory
- Gerrit Review:
- MB-19339: Create a full implementation for checkPrivilege
- Gerrit Review:
- MB-19339: Add new cbsasl error code for unknown users
- Gerrit Review:
- MB-19339: Add rbac file to settings
- Gerrit Review:
- MB-19339: Load RBAC file at startup
- Gerrit Review:
- MB-19339: Don't allow unknown users to the system
- Gerrit Review:
- MB-19339: Remove unused method Settings::isAdmin()
- Gerrit Review:
- MB-19339: Reload RBAC data
- Gerrit Review:
- MB-19339: Move code to update username to separate func
- Gerrit Review:
- MB-19339: Remove fallback to "*" user
- Gerrit Review:
- MB-19339: Handle review comments on the previous patch
- Gerrit Review:
- MB-19339: Automatically create an entry for "default"
- Gerrit Review:
- MB-19339: Refactor use std::bitset for privilege mask
- Gerrit Review:
- MB-19339: Make getConnection virtual
- Gerrit Review:
- MB-19339: Use "_admin" credentials for BucketTest
- Gerrit Review:
- MB-19339: Remove "admin" from memcached.json documentation
- Gerrit Review:
- MB-19339: Refactor privilege check to avoid shared_ptr
- Gerrit Review:
- MB-19339: Refactor the way we access RBAC
- Gerrit Review:
- MB-19339: Refactor, build rbac as a separate library
- Gerrit Review:
- MB-19339: Refactor, build rbac as a separate library
- Gerrit Review:
- MB-19339: _admin must have access to default bucket
- Gerrit Review:
- MB-19339: Sasl test need to create buckets as _admin
- Gerrit Review:
- MB-19339: Fix shutdown test to run as admin
- Gerrit Review:
- MB-19339: Refactor, build rbac as a separate library
- Gerrit Review:
- MB-19339: Fix bucket isolation test for RBAC
- Gerrit Review:
- MB-19339: Reset username cache as part of authentication
- Gerrit Review:
- MB-19339: Make unit tests RBAC aware
- Gerrit Review:
- MB-19339: Create a full implementation for checkPrivilege
- Gerrit Review:
- MB-19339: Add unit test for SASL refresh
- Gerrit Review:
- MB-19339: No need to recheck the privilege
- Gerrit Review:
- MB-19339: ns_server provides entry for default
- Gerrit Review:
- MB-19339: Enable disabled tests
- Gerrit Review:
- MB-19339: Remove unused bucket users and rbac data from test
- Gerrit Review:
- MB-19339: Add more information related to RBAC refresh
- Gerrit Review:
- MB-19339: Don't require any privileges for GET_VBUCKET
- Gerrit Review:
- MB-19339: Add a privilege debug flag
- Gerrit Review:
- MB-19339: Add to_string(PrivilegeAccess)
- Gerrit Review:
- MB-19339: Disconnect clients with EACCESS and AUTH_STALE
- Gerrit Review:
- MB-19339: Refactor: move select/list-bucket to separate file
- Gerrit Review:
- MB-19339: Make select and list bucket privilege aware
- Gerrit Review:
- MB-19339: Add unit test for Arithmethic
- Gerrit Review:
- MB-19339: Add RBAC unit tests for mutations
- Gerrit Review:
- MB-19339: Add RBAC unit test for remove
- Gerrit Review:
- MB-19339: Add RBAC check for XATTR
- Gerrit Review:
- MB-19339: Ignore bucket with empty privilege set
- Gerrit Review:
- MB-19339: Add support for privilege_debug for memcached
- Gerrit Review:
- MB-19339: Fixup privilege debug log message
- Gerrit Review:
- MB-19339: Add privilege_debug to settings stat
- Gerrit Review:
- MB-19339: Drop override for internal clients
- Gerrit Review:
- MB-19339: Add "superman" to rbac test database
- Gerrit Review:
- MB-19339: Remove privilege logging no longer needed
- Gerrit Review:
- MB-19339: Add RBAC to DCP
- Gerrit Review:
- MB-19339: Add RBAC check for DCP NOOP
- Gerrit Review:
- MB-19339: Add RBAC to TAP
- Gerrit Review:
- MB-19339: Simplify RBAC check for stats
- Gerrit Review:
- MB-19339: Make get_cmd_timers RBAC aware
- Gerrit Review:
- MB-19339: Add SecurityManagement privilege
- Gerrit Review:
- MB-19339: Use domain and type from the provided rbac
- Gerrit Review:
- MB-19339: Domain to cb::sasl
- Gerrit Review:
- MB-19339: Use domain and type from the provided rbac
- Gerrit Review:
- MB-19339: Initialize domain
- Gerrit Review: