tarantool / tarantool / 6108628822

88%

push

github

config: revoke privs for default users and roles

All user-defined users and roles are not being removed and their
privileges are not being revoked when this user or role is removed
from config. This is done to prevent extreme repercussions of
misconfiguration, e.g. empty config is provided to cluster and it
breaks up.

Default users and roles are not supposed to be changed, so this rule
does not apply to them. Now all of non-default privileges will be
revoked if such user or role is removed from config.

Default users:
* guest
* admin

Default roles:
* super
* public
* replication

Part of #8967

NO_DOC=documentation request will be filed manually for the whole
       credentials

64212 of 115873 branches covered (0.0%)

96073 of 111214 relevant lines covered (86.39%)

2634164.48 hits per line