mirror of
https://gitee.com/milvus-io/milvus.git
synced 2024-12-04 04:49:08 +08:00
469 lines
22 KiB
Go
469 lines
22 KiB
Go
// Licensed to the LF AI & Data foundation under one
|
|
// or more contributor license agreements. See the NOTICE file
|
|
// distributed with this work for additional information
|
|
// regarding copyright ownership. The ASF licenses this file
|
|
// to you under the Apache License, Version 2.0 (the
|
|
// "License"); you may not use this file except in compliance
|
|
// with the License. You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package util
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/milvus-io/milvus-proto/go-api/v2/commonpb"
|
|
"github.com/milvus-io/milvus/pkg/common"
|
|
"github.com/milvus-io/milvus/pkg/util/typeutil"
|
|
)
|
|
|
|
// Meta Prefix consts
|
|
const (
|
|
MetaStoreTypeEtcd = "etcd"
|
|
MetaStoreTypeTiKV = "tikv"
|
|
|
|
SegmentMetaPrefix = "queryCoord-segmentMeta"
|
|
ChangeInfoMetaPrefix = "queryCoord-sealedSegmentChangeInfo"
|
|
|
|
// FlushedSegmentPrefix TODO @cai.zhang: remove this
|
|
FlushedSegmentPrefix = "flushed-segment"
|
|
// HandoffSegmentPrefix TODO @cai.zhang: remove this
|
|
HandoffSegmentPrefix = "querycoord-handoff"
|
|
// SegmentReferPrefix TODO @cai.zhang: remove this
|
|
SegmentReferPrefix = "segmentRefer"
|
|
|
|
SegmentIndexPrefix = "segment-index"
|
|
FieldIndexPrefix = "field-index"
|
|
|
|
HeaderAuthorize = "authorization"
|
|
// HeaderSourceID identify requests from Milvus members and client requests
|
|
HeaderSourceID = "sourceId"
|
|
// MemberCredID id for Milvus members (data/index/query node/coord component)
|
|
MemberCredID = "@@milvus-member@@"
|
|
CredentialSeperator = ":"
|
|
UserRoot = "root"
|
|
PasswordHolder = "___"
|
|
DefaultTenant = ""
|
|
RoleAdmin = "admin"
|
|
RolePublic = "public"
|
|
DefaultDBName = "default"
|
|
DefaultDBID = int64(1)
|
|
NonDBID = int64(0)
|
|
InvalidDBID = int64(-1)
|
|
|
|
PrivilegeWord = "Privilege"
|
|
PrivilegeGroupWord = "PrivilegeGroup"
|
|
AnyWord = "*"
|
|
|
|
IdentifierKey = "identifier"
|
|
|
|
HeaderUserAgent = "user-agent"
|
|
HeaderDBName = "dbName"
|
|
|
|
RoleConfigPrivileges = "privileges"
|
|
RoleConfigObjectType = "object_type"
|
|
RoleConfigObjectName = "object_name"
|
|
RoleConfigDBName = "db_name"
|
|
RoleConfigPrivilege = "privilege"
|
|
|
|
MaxEtcdTxnNum = 128
|
|
GB = 1024 * 1024 * 1024
|
|
)
|
|
|
|
const (
|
|
// ParamsKeyToParse is the key of the param to build index.
|
|
ParamsKeyToParse = common.IndexParamsKey
|
|
)
|
|
|
|
var (
|
|
DefaultRoles = []string{RoleAdmin, RolePublic}
|
|
BuiltinRoles = []string{}
|
|
|
|
ObjectPrivileges = map[string][]string{
|
|
commonpb.ObjectType_Collection.String(): {
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeLoad.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeRelease.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCompaction.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeInsert.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDelete.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeUpsert.String()),
|
|
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGetStatistics.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateIndex.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeIndexDetail.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropIndex.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeSearch.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeFlush.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeQuery.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeLoadBalance.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeImport.String()),
|
|
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGetLoadingProgress.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGetLoadState.String()),
|
|
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreatePartition.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropPartition.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeShowPartitions.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeHasPartition.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGetFlushState.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupReadOnly.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupReadWrite.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreatePrivilegeGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropPrivilegeGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeListPrivilegeGroups.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeOperatePrivilegeGroup.String()),
|
|
},
|
|
commonpb.ObjectType_Global.String(): {
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeAll.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateCollection.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropCollection.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDescribeCollection.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeShowCollections.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeRenameCollection.String()),
|
|
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateOwnership.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropOwnership.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeSelectOwnership.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeManageOwnership.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeBackupRBAC.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeRestoreRBAC.String()),
|
|
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateResourceGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeUpdateResourceGroups.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropResourceGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDescribeResourceGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeListResourceGroups.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeTransferReplica.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeTransferNode.String()),
|
|
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeFlushAll.String()),
|
|
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateDatabase.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropDatabase.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeListDatabases.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeAlterDatabase.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDescribeDatabase.String()),
|
|
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateAlias.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropAlias.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDescribeAlias.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeListAliases.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupAdmin.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreatePrivilegeGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropPrivilegeGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeListPrivilegeGroups.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeOperatePrivilegeGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupClusterReadOnly.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupClusterReadWrite.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupClusterAdmin.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupDatabaseReadOnly.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupDatabaseReadWrite.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupDatabaseAdmin.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupCollectionReadOnly.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupCollectionReadWrite.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupCollectionAdmin.String()),
|
|
},
|
|
commonpb.ObjectType_User.String(): {
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeUpdateUser.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeSelectUser.String()),
|
|
},
|
|
}
|
|
|
|
RelatedPrivileges = map[string][]string{
|
|
commonpb.ObjectPrivilege_PrivilegeLoad.String(): {
|
|
commonpb.ObjectPrivilege_PrivilegeGetLoadState.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetLoadingProgress.String(),
|
|
},
|
|
commonpb.ObjectPrivilege_PrivilegeFlush.String(): {
|
|
commonpb.ObjectPrivilege_PrivilegeGetFlushState.String(),
|
|
},
|
|
}
|
|
|
|
ReadOnlyPrivilegeGroup = []string{
|
|
commonpb.ObjectPrivilege_PrivilegeQuery.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeSearch.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeIndexDetail.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetFlushState.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetLoadState.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetLoadingProgress.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeHasPartition.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeShowPartitions.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeShowCollections.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeListAliases.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeListDatabases.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeDatabase.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeAlias.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetStatistics.String(),
|
|
}
|
|
ReadWritePrivilegeGroup = []string{
|
|
commonpb.ObjectPrivilege_PrivilegeQuery.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeSearch.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeIndexDetail.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetFlushState.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetLoadState.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetLoadingProgress.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeHasPartition.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeShowPartitions.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeShowCollections.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeListAliases.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeListDatabases.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeDatabase.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeAlias.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetStatistics.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreateIndex.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropIndex.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreatePartition.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropPartition.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeLoad.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeRelease.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeInsert.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDelete.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeUpsert.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeImport.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeFlush.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCompaction.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeLoadBalance.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeRenameCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreateAlias.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropAlias.String(),
|
|
}
|
|
AdminPrivilegeGroup = []string{
|
|
commonpb.ObjectPrivilege_PrivilegeCreateCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeQuery.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeSearch.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeIndexDetail.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetFlushState.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetLoadState.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetLoadingProgress.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeHasPartition.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeShowPartitions.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeShowCollections.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeListAliases.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeListDatabases.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeDatabase.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeAlias.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeGetStatistics.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreateIndex.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropIndex.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreateCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreatePartition.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropPartition.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeLoad.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeRelease.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeInsert.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDelete.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeUpsert.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeImport.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeFlush.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCompaction.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeLoadBalance.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeRenameCollection.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreateAlias.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropAlias.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreateOwnership.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropOwnership.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeSelectOwnership.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeManageOwnership.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeSelectUser.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeUpdateUser.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeBackupRBAC.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeRestoreRBAC.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreateResourceGroup.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeUpdateResourceGroups.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropResourceGroup.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDescribeResourceGroup.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeListResourceGroups.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeTransferReplica.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeTransferNode.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeCreateDatabase.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeDropDatabase.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeAlterDatabase.String(),
|
|
commonpb.ObjectPrivilege_PrivilegeFlush.String(),
|
|
}
|
|
|
|
BuiltinPrivilegeGroups = map[string][]string{
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupCollectionReadOnly.String()): CollectionReadOnlyPrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupCollectionReadWrite.String()): CollectionReadWritePrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupCollectionAdmin.String()): CollectionAdminPrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupDatabaseReadOnly.String()): DatabaseReadOnlyPrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupDatabaseReadWrite.String()): DatabaseReadWritePrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupDatabaseAdmin.String()): DatabaseAdminPrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupClusterReadOnly.String()): ClusterReadOnlyPrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupClusterReadWrite.String()): ClusterReadWritePrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGroupClusterAdmin.String()): ClusterAdminPrivilegeGroup,
|
|
}
|
|
|
|
CollectionReadOnlyPrivilegeGroup = []string{
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeQuery.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeSearch.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeIndexDetail.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGetFlushState.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGetLoadState.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGetLoadingProgress.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeHasPartition.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeShowPartitions.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDescribeCollection.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDescribeAlias.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeGetStatistics.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeListAliases.String()),
|
|
}
|
|
|
|
CollectionReadWritePrivilegeGroup = append(CollectionReadOnlyPrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeLoad.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeRelease.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeInsert.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDelete.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeUpsert.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeImport.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeFlush.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCompaction.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeLoadBalance.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeRenameCollection.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateIndex.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropIndex.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreatePartition.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropPartition.String()),
|
|
)
|
|
|
|
CollectionAdminPrivilegeGroup = append(CollectionReadWritePrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateAlias.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropAlias.String()),
|
|
)
|
|
|
|
DatabaseReadOnlyPrivilegeGroup = []string{
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeShowCollections.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDescribeDatabase.String()),
|
|
}
|
|
|
|
DatabaseReadWritePrivilegeGroup = append(DatabaseReadOnlyPrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeAlterDatabase.String()),
|
|
)
|
|
|
|
DatabaseAdminPrivilegeGroup = append(DatabaseReadWritePrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateCollection.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropCollection.String()),
|
|
)
|
|
|
|
ClusterReadOnlyPrivilegeGroup = []string{
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeListDatabases.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeSelectOwnership.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeSelectUser.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDescribeResourceGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeListResourceGroups.String()),
|
|
}
|
|
|
|
ClusterReadWritePrivilegeGroup = append(ClusterReadOnlyPrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeFlushAll.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeTransferNode.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeTransferReplica.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeUpdateResourceGroups.String()),
|
|
)
|
|
|
|
ClusterAdminPrivilegeGroup = append(ClusterReadWritePrivilegeGroup,
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeBackupRBAC.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeRestoreRBAC.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateDatabase.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropDatabase.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateOwnership.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropOwnership.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeManageOwnership.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeCreateResourceGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeDropResourceGroup.String()),
|
|
MetaStore2API(commonpb.ObjectPrivilege_PrivilegeUpdateUser.String()),
|
|
)
|
|
)
|
|
|
|
// StringSet convert array to map for conveniently check if the array contains an element
|
|
func StringSet(strings []string) map[string]struct{} {
|
|
stringsMap := make(map[string]struct{})
|
|
for _, str := range strings {
|
|
stringsMap[str] = struct{}{}
|
|
}
|
|
return stringsMap
|
|
}
|
|
|
|
func StringList(stringMap map[string]struct{}) []string {
|
|
strs := make([]string, 0, len(stringMap))
|
|
for k := range stringMap {
|
|
strs = append(strs, k)
|
|
}
|
|
return strs
|
|
}
|
|
|
|
// MetaStore2API convert meta-store's privilege name to api's
|
|
// example: PrivilegeAll -> All
|
|
func MetaStore2API(name string) string {
|
|
prefix := PrivilegeWord
|
|
if strings.Contains(name, PrivilegeGroupWord) {
|
|
prefix = PrivilegeGroupWord
|
|
}
|
|
return name[strings.Index(name, prefix)+len(prefix):]
|
|
}
|
|
|
|
func PrivilegeNameForAPI(name string) string {
|
|
_, ok := commonpb.ObjectPrivilege_value[name]
|
|
if !ok {
|
|
if strings.HasPrefix(name, PrivilegeGroupWord) {
|
|
return typeutil.After(name, PrivilegeGroupWord)
|
|
}
|
|
return ""
|
|
}
|
|
return MetaStore2API(name)
|
|
}
|
|
|
|
func PrivilegeNameForMetastore(name string) string {
|
|
// check if name is single privilege
|
|
dbPrivilege := PrivilegeWord + name
|
|
_, ok := commonpb.ObjectPrivilege_value[dbPrivilege]
|
|
if !ok {
|
|
// check if name is privilege group
|
|
dbPrivilege := PrivilegeGroupWord + name
|
|
_, ok := commonpb.ObjectPrivilege_value[dbPrivilege]
|
|
if !ok {
|
|
return ""
|
|
}
|
|
return dbPrivilege
|
|
}
|
|
return dbPrivilege
|
|
}
|
|
|
|
// check if the name is defined by built in privileges or privilege groups in system
|
|
func IsPrivilegeNameDefined(name string) bool {
|
|
return PrivilegeNameForMetastore(name) != ""
|
|
}
|
|
|
|
func IsBuiltinPrivilegeGroup(name string) bool {
|
|
dbPrivilege := PrivilegeGroupWord + name
|
|
_, ok := commonpb.ObjectPrivilege_value[dbPrivilege]
|
|
return ok
|
|
}
|
|
|
|
func PrivilegeGroupNameForMetastore(name string) string {
|
|
return PrivilegeGroupWord + name
|
|
}
|
|
|
|
func IsAnyWord(word string) bool {
|
|
return word == AnyWord
|
|
}
|
|
|
|
func IsBuiltinRole(roleName string) bool {
|
|
for _, builtinRole := range BuiltinRoles {
|
|
if builtinRole == roleName {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|