tarantool / tarantool / 18121973563

88%

push

github

config: sync users and roles with config on reload

Previously, if a user or role was removed from
`credentials.users` or `credentials.roles` in config,
it still remained in the instance after reload. This was
intentional to prevent bricking when an empty `credentials`
section was rolled out, but it left stale accounts and roles
in the system, which is a security risk.

Now both users and roles are synchronized with config on reload:
 - users/roles missing from config are dropped,
 - users/roles present in config are created/updated,
 - manually created users/roles remain untouched.

Closes #11827

NO_DOC=bugfix

71286 of 125127 branches covered (56.97%)

104792 of 119598 relevant lines covered (87.62%)

1356996.42 hits per line