tarantool / tarantool / 10459505389

88%

push

github

config: grant access to specific lua function

This patch adds the capability to grant access to specific Lua functions
in the declarative configuration. You can now grant access by assigning
the function name to `credentials.users.<user>.privileges.lua_call`.

Closes #10304

@TarantoolBot document
Title: Document lua_call feature

Root document: https://www.tarantool.io/en/doc/latest/reference/configuration/configuration_reference/

`<user_or_role_name>.privileges.lua_call`:

Defines the Lua functions that the specified user or a user with the
specified role has permission to call. This field accepts a special
value, `all`, which grants the privilege to use any global non-built-in
Lua functions.

For example, setting
	`credentials.users.alice.privileges.lua_call = ['foo']`
allows the user alice to execute the foo function.

68260 of 121561 branches covered (56.15%)

100906 of 115754 relevant lines covered (87.17%)

2451486.63 hits per line