veeso / ic-dbms / 37635513289

95%

push

github

feat(canister)!: grant per-table permissions in the access control list (#7)

The reserved ic_dbms_acl table now stores one row per grant: a principal, an AclPermission (Admin, Read, Insert, Update, Delete) and an optional table, where no table means every table. Every generated endpoint checks the matching permission: select and aggregate need Read, insert, update and delete need the matching write permission, the untyped select needs Read on every joined table and eager relation, cascade deletes need Delete on every referencing table, and opening a transaction needs at least one grant. ACL management still needs Admin; migrations need Admin or a controller. The clients and the wrapper canister use the new AclGrant type.

BREAKING CHANGE: Permission and AclEntry are removed. acl_grant and acl_revoke take an AclGrant, acl_list and my_permissions return Vec<AclGrant>, and AclError::AccessDenied now carries the required AclPermission and the table.

closes #5

583 of 590 new or added lines in 5 files covered. (98.81%)

1620 of 1706 relevant lines covered (94.96%)

14.59 hits per line