tarantool
/
tarantool
/
19415
/
4
83%
master: 88%
master: 88%
|
Ran
|
Files
306
|
Run time
42s
|
Badge
Embed ▾
README BADGES
|
coverage: 82.369% (-0.1%) from 82.48%
push
travis-ci
kyukhinreplication: don't drop admin super privileges The admin user has universal privileges before bootstrap or recovery are done. That allows to, for example, bootstrap from a remote master, because to do that the admin should be able to insert into system spaces, such as _priv. But after the patch on online credentials update was implemented (#2763, 48d00b0e8) the admin could loose its universal access if, for example, a role was granted to him before universal access was recovered. That happened by two reasons: - Any change in access rights, even in granted roles, led to rebuild of universal access; - Any change in access rights updated the universal access in all existing sessions, thanks to #2763. What happened: two tarantools were started. One of them master, granted 'replication' role to admin. Second node, slave, tried to bootstrap from the master. The slave created an admin session and started loading data. After it loaded 'grant replication role to admin' command, this nullified admin universal access everywhere, including this session. Next rows could not be applied. Closes #4606 (cherry picked from commit 95237ac8c)
41634 of 50546 relevant lines covered (82.37%)
822077.0 hits per line
