diff options
| author | ijon <ijon@ydb.tech> | 2025-02-21 11:07:10 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-02-21 11:07:10 +0300 |
| commit | 795aa32c5c84a9dd757b94ee893c56c53c7630c7 (patch) | |
| tree | 0ffd3020ba80deb868847b0c9506c89262ff3ff7 /library/cpp/lua | |
| parent | bbb7d71a8c94b1ac1ee531aaf111ba173b63121c (diff) | |
| download | ydb-795aa32c5c84a9dd757b94ee893c56c53c7630c7.tar.gz | |
security: make domain_login_only+enable_strict_* mode work (#14557)
Make `domain_login_only`+`enable_strict_acl_check`+`enable_strict_user_management` work.
- grpc-proxy: fix bug that require admin to have explicit `ydb.database.connect` permission on a database to be able to work with it (while original intention was that admins should bypass database connect check)
- ticket-parser: allow users from the root database to authenticate in a tenant database
- allow cluster admin to set the owner of a database (e.g. database admin) at the root schemeshard, without checking target sid for existence, effectively bypassing `enable_strict_acl_check` restriction in that particular case
Diffstat (limited to 'library/cpp/lua')
0 files changed, 0 insertions, 0 deletions