55 Commits

Author SHA1 Message Date
920ee6e011 ddl: forbid operations that might change system table id in nextgen (#65411)
ref pingcap/tidb#61702
2026-01-09 10:52:05 +00:00
752905dd38 bootstrap/upgrade: split definition and code logic for better maintenance (#65403)
close pingcap/tidb#61702
2026-01-06 13:00:05 +00:00
69f71e4ab1 sem, privilege: fix the issue that some privileges cannot be limited (#64160)
close pingcap/tidb#64159
2025-12-19 07:34:47 +00:00
3328284abc privileges,planner: implement checks for RESTRICTED_USER_ADMIN for granting privileges and roles (#64297)
close pingcap/tidb#64295
2025-11-17 11:48:02 +00:00
af24a62da2 infoschema, server: add per connection TLS status (#62563)
close pingcap/tidb#64223
2025-11-14 13:32:11 +00:00
259852d340 *: add the new SEMv2 config and implement most of the functions (#61634)
close pingcap/tidb#61582, close pingcap/tidb#61583, close pingcap/tidb#61584, close pingcap/tidb#61585
2025-08-18 13:38:47 +00:00
ad4f3ea0f7 bootstrap: refactor the system tables/dbs creation (#62540)
ref pingcap/tidb#61702
2025-07-23 05:07:17 +00:00
0cd280bbd2 meta: unify definition of system or memory DB name (#62247)
ref pingcap/tidb#61702
2025-07-07 19:17:48 +00:00
15fe8f1be9 telemetry: add telemetry related code back (#61753)
close pingcap/tidb#61766
2025-07-04 05:19:57 +00:00
8fc1430b83 *: change some unnecessary error logs to warn or info (#61428) 2025-06-18 06:37:15 +00:00
a9cef85bd8 privileges: fix TiDB panic when security.skip-grant-table is true (#61791)
close pingcap/tidb#61790
2025-06-18 04:28:27 +00:00
8ffbddd447 *: gopls modernize non-owned packages, final part (#60919)
close pingcap/tidb#60918
2025-05-07 18:14:54 +00:00
334d985ad4 ldap,test: re-generate crt/key for ldap test (#60741)
close pingcap/tidb#60739
2025-04-23 11:06:02 +00:00
7af21d4ab3 privilege: uncomments two test cases (#60351)
close pingcap/tidb#29286
2025-04-01 07:35:19 +00:00
d916614026 privilege: fix create temporary tables privileges related bugs (#60313)
close pingcap/tidb#29280, close pingcap/tidb#29281
2025-03-31 06:04:12 +00:00
d22abc8d8c privileges: user@'' is different with user@'%' (#60082)
close pingcap/tidb#33174
2025-03-17 03:12:54 +00:00
b72ff3b659 privilege: reuse chunk in loadTable function (#59821)
ref pingcap/tidb#55563
2025-03-10 07:31:48 +00:00
949fc53e97 metrics: add metrics for active users count (#59533)
ref pingcap/tidb#55563
2025-02-28 14:45:19 +00:00
b61e0e16ef privilege, domain: reduce the memory jitter of privilege reload activity for 2M users (#59487)
ref pingcap/tidb#55563, close pingcap/tidb#59403
2025-02-27 06:54:06 +00:00
87f6c7b7e4 executor: introduce max_user_connections (#59197)
close pingcap/tidb#59203
2025-02-26 05:02:00 +00:00
538bab6a3f privilege: handle username with "@" correctly for role(RBAC) related code (#59739)
close pingcap/tidb#59552
2025-02-26 03:20:25 +00:00
397b0f228a *: add sql variable @@tidb_accelerate_user_creation_update (#58512)
ref pingcap/tidb#55563
2025-02-12 03:35:32 +00:00
2efcabb11d privilege/privileges: refactor the data struct for user privilege data (#58945)
close pingcap/tidb#55563
2025-02-11 04:41:18 +00:00
cf4d252af8 *: split definition out of variable pkg and refactor some reorg methods (#59146)
ref pingcap/tidb#57229, ref pingcap/tidb#57497
2025-01-23 09:24:44 +00:00
cc4b0938e5 planner, executor: add privilege check for traffic replay (#59054)
close pingcap/tidb#59053
2025-01-21 13:16:02 +00:00
bee268dc29 *: fix a bug for default_authentication_plugin (2) (#58723)
ref pingcap/tidb#54138
2025-01-06 13:31:28 +00:00
7063a6fce0 *: fix a bug for default_authentication_plugin (#57391)
ref pingcap/tidb#54138
2025-01-06 10:28:46 +00:00
c8ba4e3ace *: avoid some unnecessary call of ensureActiveUser() (#57388)
ref pingcap/tidb#55563
2024-12-17 03:33:42 +00:00
6aac3e82d7 *: add context.Context to ensureActiveUser() (#57351)
ref pingcap/tidb#55563
2024-12-02 12:54:11 +00:00
ec288d95a3 *: avoid notify privilege update for all users (#57042)
ref pingcap/tidb#55563
2024-11-29 13:16:54 +00:00
cf5a61709d *: maintain the active users for privilege data (#56709)
ref pingcap/tidb#55563
2024-10-30 13:30:13 +00:00
Bin
5faeca4d1b *: use golang built-in functions rather than mathutil (#56818)
close pingcap/tidb#56594
2024-10-25 05:18:17 +00:00
a63d42e96b *: fix flaky test TestConnectThrough636 (#56310)
close pingcap/tidb#56309
2024-09-25 12:30:04 +00:00
3176b9c263 *: move XXInfo/Job, etc, out from model pkg in parser to meta (#55754)
ref pingcap/tidb#54436
2024-09-04 04:49:45 +00:00
37087225f5 ddl/domain: disallow set schema lease to 0 (#55312)
ref pingcap/tidb#54436
2024-08-12 04:03:08 +00:00
da7d83f54a privilege: Remove TestAbnormalMySQLTable (#54925)
close pingcap/tidb#54924
2024-07-26 09:17:33 +00:00
3860ba5c2e *: implement auth plugin support in the extension framework (#53494)
close pingcap/tidb#53181
2024-07-03 15:22:29 +00:00
72d22d60fc privilege: fix auth_socket bug, should only allow os user name to login (#54032)
close pingcap/tidb#54031
2024-06-17 07:28:15 +00:00
29fc940ae4 resource_control: introduce privilege RESOURCE_GROUP_USER to restrict the switch of resource group (#53483)
close pingcap/tidb#53440
2024-06-14 07:40:14 +00:00
d2d12574a3 planner: fix privilege for the view in the CTE and wrong error handle (#53556)
close pingcap/tidb#49721
2024-05-28 09:16:23 +00:00
40456f36fe *: make package sqlexec not depend on sessionctx anymore (#52031)
close pingcap/tidb#52029
2024-03-25 11:59:17 +00:00
d9406195cc ldap: add timeout and retry-backoff for ldap (#51927)
close pingcap/tidb#51883
2024-03-20 06:18:43 +00:00
7b6fc23617 util: use atomic.Pointer to replace with atomic.Value (#51559)
ref pingcap/tidb#44736
2024-03-07 03:36:42 +00:00
3d1708f80c telemetry: remove the codes of Telemetry (#51202)
close pingcap/tidb#49939
2024-02-22 11:48:26 +00:00
2041d494cc util: Adjust binary collate behavior to do pattern matching in bytes (#51113)
close pingcap/tidb#50393
2024-02-21 08:45:27 +00:00
51e1e13494 *: update interface{} to any (#50770)
ref pingcap/tidb#50765
2024-01-29 07:21:29 +00:00
9416934ea3 *: split planner errors and remove duplicate definitions (#50695)
ref pingcap/tidb#48875
2024-01-26 09:42:21 +00:00
90fc8148a2 privilege: add min TLS version for LDAP (#50527)
ref pingcap/tidb#36036
2024-01-23 10:24:20 +00:00
a7ef915052 *: upgrade rules_go (#49693) 2023-12-27 02:15:28 +00:00
9fad344aac txn: make load data transactional (#49079)
ref pingcap/tidb#49078
2023-12-18 07:43:53 +00:00