init push
This commit is contained in:
oceanbase-admin
129
src/share/ob_priv_common.h
Normal file
129
src/share/ob_priv_common.h
Normal file
@ -0,0 +1,129 @@
|
||||
/**
|
||||
* Copyright (c) 2021 OceanBase
|
||||
* OceanBase CE is licensed under Mulan PubL v2.
|
||||
* You can use this software according to the terms and conditions of the Mulan PubL v2.
|
||||
* You may obtain a copy of Mulan PubL v2 at:
|
||||
* http://license.coscl.org.cn/MulanPubL-2.0
|
||||
* THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
|
||||
* EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
|
||||
* MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
|
||||
* See the Mulan PubL v2 for more details.
|
||||
*/
|
||||
|
||||
#ifndef OCEANBASE_SHARE_OB_PRIV_COMMON_
|
||||
#define OCEANBASE_SHARE_OB_PRIV_COMMON_
|
||||
|
||||
#include "lib/container/ob_se_array.h"
|
||||
#include "share/schema/ob_priv_type.h"
|
||||
|
||||
namespace oceanbase {
|
||||
|
||||
namespace share {
|
||||
|
||||
typedef int64_t ObRawPriv; /* raw sys priv
|
||||
value is PRIV_ID_CREATE_SESSION etc
|
||||
ob_sys_priv_type.h defined in */
|
||||
|
||||
typedef int64_t ObRawObjPriv; /* raw obj priv
|
||||
value is OBJ_PRIV_ID_ALTER etc
|
||||
ob_obj_priv_type.h defined in */
|
||||
|
||||
typedef common::ObSEArray<ObRawPriv, 4> ObRawPrivArray; // used in grant priv, revoke priv
|
||||
|
||||
typedef common::ObSEArray<ObRawObjPriv, 4> ObRawObjPrivArray; // used in grant, revoke objpriv
|
||||
|
||||
typedef common::ObSEArray<ObPrivSet, 3> ObPackedPrivArray; // used in priv schema, packed
|
||||
|
||||
typedef ObPrivSet ObPackedObjPriv; // used in obj priv in priv schema packed
|
||||
|
||||
/* database object type definition
|
||||
table, view, pf(procedure/function) */
|
||||
|
||||
// typedef share::schema::ObObjectType ObDbObjType;
|
||||
|
||||
#define NO_OPTION 0
|
||||
#define ADMIN_OPTION 1 /* used in system privilege */
|
||||
#define GRANT_OPTION 1 /* used in obj privilege */
|
||||
|
||||
#define COL_ID_FOR_TAB_PRIV OB_ALL_MAX_COLUMN_ID // when table level priv, set colid to this value
|
||||
#define ALL_DIR_NAME "DIRECTORY"
|
||||
#define OBJ_ID_FOR_DIR 0
|
||||
|
||||
class ObPrivPacker {
|
||||
|
||||
public:
|
||||
static int init_packed_array(ObPackedPrivArray& array);
|
||||
|
||||
static int raw_priv_to_packed_info(
|
||||
const uint64_t option, const ObRawPriv priv, int& group_id, ObPrivSet& packed_priv);
|
||||
|
||||
static int raw_obj_priv_to_packed_info(const uint64_t option, const ObRawObjPriv priv, ObPackedObjPriv& packed_priv);
|
||||
|
||||
static int pack_raw_priv(const uint64_t option, const ObRawPriv priv, ObPackedPrivArray& packed_array);
|
||||
|
||||
static int pack_raw_priv_list(
|
||||
const uint64_t option, const ObRawPrivArray& priv_list, ObPackedPrivArray& packed_array);
|
||||
|
||||
static int pack_raw_obj_priv(const uint64_t option, const ObRawObjPriv priv, ObPackedObjPriv& packed_obj_privs);
|
||||
|
||||
static int pack_raw_obj_priv_list(
|
||||
const uint64_t option, const ObRawObjPrivArray priv_list, ObPackedObjPriv& packed_obj_privs);
|
||||
|
||||
static int append_raw_obj_priv(const uint64_t option, const ObRawObjPriv priv, ObPackedObjPriv& packed_obj_privs);
|
||||
|
||||
static int raw_obj_priv_from_pack(const ObPackedObjPriv& packed_obj_privs, ObRawObjPrivArray& raw_priv_array);
|
||||
|
||||
static int raw_option_obj_priv_from_pack(const ObPackedObjPriv& packed_obj_privs, ObRawObjPrivArray& raw_priv_array);
|
||||
|
||||
static int raw_no_option_obj_priv_from_pack(
|
||||
const ObPackedObjPriv& packed_obj_privs, ObRawObjPrivArray& raw_priv_array);
|
||||
|
||||
static int merge_two_packed_array(ObPackedPrivArray& packed_array_1, const ObPackedPrivArray& packed_array_2);
|
||||
|
||||
static int packed_array_to_raw_privs(const ObPackedPrivArray& packed_array, ObRawPrivArray& raw_priv_array,
|
||||
ObRawPrivArray& raw_priv_array_with_option);
|
||||
|
||||
static int get_total_obj_privs(const ObPackedObjPriv& packed_obj_privs, int& n_cnt);
|
||||
|
||||
static int get_total_privs(const ObPackedPrivArray& packed_array, int& n_cnt);
|
||||
|
||||
private:
|
||||
static int has_raw_priv(const ObRawPriv raw_priv, const ObPrivSet priv_set, bool& exists, uint64_t& option);
|
||||
|
||||
static int push_back_raw_priv_array(ObRawPriv raw_priv, bool exists, uint64_t option, ObRawPrivArray& raw_priv_array,
|
||||
ObRawPrivArray& raw_priv_array_with_option);
|
||||
};
|
||||
|
||||
class ObOraPrivCheck {
|
||||
public:
|
||||
/* check if rawsyspriv exists */
|
||||
static int raw_sys_priv_exists(
|
||||
const uint64_t option, const ObRawPriv priv, const ObPackedPrivArray& packed_array, bool& exists);
|
||||
|
||||
static int raw_sys_priv_exists(const ObRawPriv priv, const ObPackedPrivArray& packed_array, bool& exists);
|
||||
|
||||
/* at least, one in plist */
|
||||
static int packed_sys_priv_list_or_exists(
|
||||
const ObPackedPrivArray& plist_to_be_checked, const ObPackedPrivArray& packed_array, bool& exists);
|
||||
|
||||
static int raw_obj_priv_exists(
|
||||
const ObRawObjPriv priv, const uint64_t option, const ObPackedObjPriv& obj_privs, bool& exists);
|
||||
|
||||
static int raw_obj_priv_exists(const ObRawObjPriv priv, const ObPackedObjPriv& obj_privs, bool& exists);
|
||||
|
||||
static int raw_obj_priv_exists_with_info(
|
||||
const ObRawObjPriv priv, const ObPackedObjPriv& obj_privs, bool& exists, uint64_t& option);
|
||||
|
||||
static int packed_obj_priv_list_or_exists(
|
||||
const ObPackedObjPriv& priv_list_to_be_checked, const ObPackedObjPriv& obj_privs, bool& exists);
|
||||
|
||||
static bool user_is_owner(const common::ObString& user_name, const common::ObString& db_name);
|
||||
|
||||
/* check p1, if not passed, then cond==true and check p2 */
|
||||
static int p1_or_cond_p2_exists(
|
||||
const ObRawPriv priv1, bool cond, const ObRawPriv priv2, const ObPackedPrivArray& packed_array, bool& exists);
|
||||
};
|
||||
} // end namespace share
|
||||
} // end namespace oceanbase
|
||||
|
||||
#endif
|
||||
Reference in New Issue
Block a user