veeso / ic-dbms / 37625090341

95%

Build Type

push

github

Committed by web-flow

Commit Message

feat(canister): track transaction ownership in the canister (#6)

* feat!: migrate to wasm-dbms 0.10

wasm-dbms 0.10 removes the engine access control list and stops recording who opened a transaction. Adapt the canister runtime, the DbmsCanister macro, the clients, the wrapper canister and the PocketIC tests to the new signatures: DbmsContext, WasmDbmsDatabase and DatabaseSchema lose their access-control type parameter, begin_transaction takes no owner and has_transaction takes no caller. Access control and transaction ownership are re-added in the canister by the next two commits of this branch.

refs #3

* feat(acl)!: store the access control list in a reserved canister table

wasm-dbms 0.10 leaves access control to the embedder. Admin principals now live in the reserved ic_dbms_acl table that #[derive(DbmsCanister)] registers at init and composes with the user schema through CanisterSchema, so drift detection and migrations cover it. Every endpoint requires Permission::Admin; controllers may always run migrations so a drifted canister can be healed. IcDbmsError becomes an enum with Acl and Dbms variants, the Candid interface gains acl_grant, acl_revoke, acl_list and my_permissions, begin_transaction requires Admin and returns a Result, and table names starting with ic_dbms_ are rejected at compile time.

The permission model has a single Admin variant and is shaped to grow into per-table read, insert, update and delete grants.

refs #3

* feat(canister): track transaction ownership in the canister

wasm-dbms 0.10 identifies a transaction by its id alone. The canister now keeps a heap-only ledger from transaction id to the principal that opened it: begin_transaction records the caller, every call that names a transaction id traps unless the caller opened it and the id is still open, and commit and rollback remove the entry whether or not the engine call succeeded. Stale entries for ids the engine already closed are evicted on lookup. The generated ... (continued)

Coverage Stats

817 of 891 new or added lines in 7 files covered. (91.69%)

1 existing line in 1 file now uncovered.

1201 of 1284 relevant lines covered (93.54%)

10.0 hits per line