caleb-brown/redict
1
0
Fork 0
mirror of https://codeberg.org/redict/redict.git synced 2025-01-22 16:18:28 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity
e9ae03787e
redict/tests/assets
History
Harkrishn Patro a43b6922d1
Set default channel permission to resetchannels for 7.0 (#10181) 
For backwards compatibility in 6.x, channels default permission was set to `allchannels` however with 7.0,
we should modify it and the default value should be `resetchannels` for better security posture.
Also, with selectors in ACL, a client doesn't have to set channel rules everytime and by default
the value will be `resetchannels`.

Before this change
```
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
127.0.0.1:6379>  acl setuser hp on nopass +@all ~*
OK
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
2) "user hp on nopass ~* &* +@all"
127.0.0.1:6379>  acl setuser hp1 on nopass -@all (%R~sales*)
OK
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
2) "user hp on nopass ~* &* +@all"
3) "user hp1 on nopass &* -@all (%R~sales* &* -@all)"
```

After this change
```
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
127.0.0.1:6379> acl setuser hp on nopass +@all ~*
OK
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
2) "user hp on nopass ~* resetchannels +@all"
127.0.0.1:6379> acl setuser hp1 on nopass -@all (%R~sales*)
OK
127.0.0.1:6379> acl list
1) "user default on nopass ~* &* +@all"
2) "user hp on nopass ~* resetchannels +@all"
3) "user hp1 on nopass resetchannels -@all (%R~sales* resetchannels -@all)"
```
2022-01-30 12:02:55 +02:00
..
corrupt_empty_keys.rdb Replace all usage of ziplist with listpack for t_zset (#9366) 2021-09-09 18:18:53 +03:00
corrupt_ziplist.rdb Sanitize dump payload: ziplist, listpack, zipmap, intset, stream 2020-12-06 14:54:34 +02:00
default.conf Set repl-diskless-sync to yes by default, add repl-diskless-sync-max-replicas (#10092) 2022-01-17 14:11:11 +02:00
encodings.rdb RDB load of different encodings test added. 2012-03-23 20:24:30 +01:00
hash-ziplist.rdb Replace all usage of ziplist with listpack for t_hash (#8887) 2021-08-10 09:18:49 +03:00
hash-zipmap.rdb Test that zipmap from RDB is correctly converted 2012-01-25 13:28:11 -08:00
list-quicklist.rdb Add support for list type to store elements larger than 4GB (#9357) 2021-11-03 20:47:18 +02:00
minimal.conf Fix default/explicit "save" parameter loading. (#7767) 2020-09-09 15:12:57 +03:00
nodefaultuser.acl ACL channels permission handling for save/load scenario. (#8794) 2021-04-19 13:27:44 +03:00
rdb-preamble.aof Implement Multi Part AOF mechanism to avoid AOFRW overheads. (#9788) 2022-01-03 19:14:13 +02:00
scriptbackup.rdb Remove EVAL script verbatim replication, propagation, and deterministic execution logic (#9812) 2021-12-21 08:32:42 +02:00
user.acl Set default channel permission to resetchannels for 7.0 (#10181) 2022-01-30 12:02:55 +02:00
userwithselectors.acl ACL V2 - Selectors and key based permissions (#9974) 2022-01-20 13:05:27 -08:00
zset-ziplist.rdb Replace all usage of ziplist with listpack for t_zset (#9366) 2021-09-09 18:18:53 +03:00