bce48361ca
Unique/global InterpreterContext that is Storage agnostic (has a reference to the DbmsHandler instead) * InterpreterContext is no longer the owner of Storage * New Database structure that handles Storage, Triggers, Streams * Renamed SessinContextHandler to DbmsHandler and simplified the multi-tenant logic * Added Gatekeeper and updated handlers to use it --------- Co-authored-by: Gareth Lloyd <gareth.lloyd@memgraph.io>
127 lines
5.1 KiB
C++
127 lines
5.1 KiB
C++
// Copyright 2023 Memgraph Ltd.
|
|
//
|
|
// Use of this software is governed by the Business Source License
|
|
// included in the file licenses/BSL.txt; by using this file, you agree to be bound by the terms of the Business Source
|
|
// License, and you may not use this file except in compliance with the Business Source License.
|
|
//
|
|
// As of the Change Date specified in that file, in accordance with
|
|
// the Business Source License, use of this software will be governed
|
|
// by the Apache License, Version 2.0, included in the file
|
|
// licenses/APL.txt.
|
|
|
|
#pragma once
|
|
|
|
#include <optional>
|
|
#include <string>
|
|
#include <string_view>
|
|
#include <vector>
|
|
|
|
#include "query/frontend/ast/ast.hpp" // overkill
|
|
#include "query/typed_value.hpp"
|
|
|
|
namespace memgraph::query {
|
|
|
|
class AuthQueryHandler {
|
|
public:
|
|
AuthQueryHandler() = default;
|
|
virtual ~AuthQueryHandler() = default;
|
|
|
|
AuthQueryHandler(const AuthQueryHandler &) = delete;
|
|
AuthQueryHandler(AuthQueryHandler &&) = delete;
|
|
AuthQueryHandler &operator=(const AuthQueryHandler &) = delete;
|
|
AuthQueryHandler &operator=(AuthQueryHandler &&) = delete;
|
|
|
|
/// Return false if the user already exists.
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual bool CreateUser(const std::string &username, const std::optional<std::string> &password) = 0;
|
|
|
|
/// Return false if the user does not exist.
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual bool DropUser(const std::string &username) = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual void SetPassword(const std::string &username, const std::optional<std::string> &password) = 0;
|
|
|
|
#ifdef MG_ENTERPRISE
|
|
/// Return true if access revoked successfully
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual bool RevokeDatabaseFromUser(const std::string &db, const std::string &username) = 0;
|
|
|
|
/// Return true if access granted successfully
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual bool GrantDatabaseToUser(const std::string &db, const std::string &username) = 0;
|
|
|
|
/// Returns database access rights for the user
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual std::vector<std::vector<memgraph::query::TypedValue>> GetDatabasePrivileges(const std::string &username) = 0;
|
|
|
|
/// Return true if main database set successfully
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual bool SetMainDatabase(const std::string &db, const std::string &username) = 0;
|
|
|
|
/// Delete database from all users
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual void DeleteDatabase(std::string_view db) = 0;
|
|
#endif
|
|
|
|
/// Return false if the role already exists.
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual bool CreateRole(const std::string &rolename) = 0;
|
|
|
|
/// Return false if the role does not exist.
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual bool DropRole(const std::string &rolename) = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual std::vector<memgraph::query::TypedValue> GetUsernames() = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual std::vector<memgraph::query::TypedValue> GetRolenames() = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual std::optional<std::string> GetRolenameForUser(const std::string &username) = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual std::vector<memgraph::query::TypedValue> GetUsernamesForRole(const std::string &rolename) = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual void SetRole(const std::string &username, const std::string &rolename) = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual void ClearRole(const std::string &username) = 0;
|
|
|
|
virtual std::vector<std::vector<memgraph::query::TypedValue>> GetPrivileges(const std::string &user_or_role) = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual void GrantPrivilege(
|
|
const std::string &user_or_role, const std::vector<memgraph::query::AuthQuery::Privilege> &privileges
|
|
#ifdef MG_ENTERPRISE
|
|
,
|
|
const std::vector<std::unordered_map<memgraph::query::AuthQuery::FineGrainedPrivilege, std::vector<std::string>>>
|
|
&label_privileges,
|
|
|
|
const std::vector<std::unordered_map<memgraph::query::AuthQuery::FineGrainedPrivilege, std::vector<std::string>>>
|
|
&edge_type_privileges
|
|
#endif
|
|
) = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual void DenyPrivilege(const std::string &user_or_role,
|
|
const std::vector<memgraph::query::AuthQuery::Privilege> &privileges) = 0;
|
|
|
|
/// @throw QueryRuntimeException if an error ocurred.
|
|
virtual void RevokePrivilege(
|
|
const std::string &user_or_role, const std::vector<memgraph::query::AuthQuery::Privilege> &privileges
|
|
#ifdef MG_ENTERPRISE
|
|
,
|
|
const std::vector<std::unordered_map<memgraph::query::AuthQuery::FineGrainedPrivilege, std::vector<std::string>>>
|
|
&label_privileges,
|
|
|
|
const std::vector<std::unordered_map<memgraph::query::AuthQuery::FineGrainedPrivilege, std::vector<std::string>>>
|
|
&edge_type_privileges
|
|
#endif
|
|
) = 0;
|
|
};
|
|
|
|
} // namespace memgraph::query
|