caleb-brown/redict
1
0
Fork 0
mirror of https://codeberg.org/redict/redict.git synced 2025-01-22 16:18:28 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity
69017fa232
redict/tests/assets
History
Harkrishn Patro a43b6922d1
Set default channel permission to resetchannels for 7.0 (#10181) 
For backwards compatibility in 6.x, channels default permission was set to `allchannels` however with 7.0,
we should modify it and the default value should be `resetchannels` for better security posture.
Also, with selectors in ACL, a client doesn't have to set channel rules everytime and by default
the value will be `resetchannels`.

Before this change
```
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
127.0.0.1:6379>  acl setuser hp on nopass +@all ~*
OK
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
2) "user hp on nopass ~* &* +@all"
127.0.0.1:6379>  acl setuser hp1 on nopass -@all (%R~sales*)
OK
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
2) "user hp on nopass ~* &* +@all"
3) "user hp1 on nopass &* -@all (%R~sales* &* -@all)"
```

After this change
```
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
127.0.0.1:6379> acl setuser hp on nopass +@all ~*
OK
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
2) "user hp on nopass ~* resetchannels +@all"
127.0.0.1:6379> acl setuser hp1 on nopass -@all (%R~sales*)
OK
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
2) "user hp on nopass ~* resetchannels +@all"
3) "user hp1 on nopass resetchannels -@all (%R~sales* resetchannels -@all)"
```
2022-01-30 12:02:55 +02:00
..
corrupt_empty_keys.rdb Replace all usage of ziplist with listpack for t_zset (#9366) 2021-09-09 18:18:53 +03:00
corrupt_ziplist.rdb
default.conf Set repl-diskless-sync to yes by default, add repl-diskless-sync-max-replicas (#10092) 2022-01-17 14:11:11 +02:00
encodings.rdb
hash-ziplist.rdb
hash-zipmap.rdb
list-quicklist.rdb Add support for list type to store elements larger than 4GB (#9357) 2021-11-03 20:47:18 +02:00
minimal.conf
nodefaultuser.acl
rdb-preamble.aof Implement Multi Part AOF mechanism to avoid AOFRW overheads. (#9788) 2022-01-03 19:14:13 +02:00
scriptbackup.rdb Remove EVAL script verbatim replication, propagation, and deterministic execution logic (#9812) 2021-12-21 08:32:42 +02:00
user.acl Set default channel permission to resetchannels for 7.0 (#10181) 2022-01-30 12:02:55 +02:00
userwithselectors.acl ACL V2 - Selectors and key based permissions (#9974) 2022-01-20 13:05:27 -08:00
zset-ziplist.rdb Replace all usage of ziplist with listpack for t_zset (#9366) 2021-09-09 18:18:53 +03:00