veeso / wasm-dbms / 25016999734

91%

main: 91%

Build Type

push

github

Committed by veeso

Commit Message

feat(acl)!: granular per-identity permissions (closes #87)

Replaces the flat allow-list ACL with a granular permission model.
Each identity carries `admin` / `manage_acl` / `migrate` flags plus
`TablePerms` (READ/INSERT/UPDATE/DELETE) scoped to all tables or to
specific tables. CRUD endpoints generated by `#[derive(DbmsCanister)]`
gate per-operation; migration endpoints gate on `migrate`.

Breaking changes:
- ACL page layout bumped to v2 (no migration from 0.8.x).
- `IcDbmsCanisterInitArgs.allowed_principals` is `Option<Vec<Principal>>`;
  `None`/empty bootstraps the deployer as full admin.
- Canister endpoints `acl_add_principal` / `acl_remove_principal` /
  `acl_allowed_principals` removed; replaced by `grant_admin`,
  `revoke_admin`, `grant_manage_acl`, `revoke_manage_acl`,
  `grant_migrate`, `revoke_migrate`, `grant_all_tables_perms`,
  `revoke_all_tables_perms`, `grant_table_perms`, `revoke_table_perms`,
  `remove_identity`, `list_identities`, `my_perms`.
- New `DbmsError::AccessDenied { table, required }` returned in lieu
  of trapping for unauthorized CRUD/ACL/migrate calls.
- New `MemoryError::AclLayoutUnsupported`.

Coverage Stats

712 of 872 new or added lines in 8 files covered. (81.65%)

6 existing lines in 2 files now uncovered.

21730 of 23832 relevant lines covered (91.18%)

909092.58 hits per line