Skip to content

privilege: handle username with "@" correctly for role(RBAC) related code#59739

Merged
ti-chi-bot[bot] merged 4 commits into
pingcap:masterfrom
tiancaiamao:issue59552
Feb 26, 2025
Merged

privilege: handle username with "@" correctly for role(RBAC) related code#59739
ti-chi-bot[bot] merged 4 commits into
pingcap:masterfrom
tiancaiamao:issue59552

Conversation

@tiancaiamao

Copy link
Copy Markdown
Contributor

What problem does this PR solve?

Issue Number: close #59552

Problem Summary:

What changed and how does it work?

The old code use key = username + "@" + host, and also split by "@" to get back the username.
This is not stable enough when the username itself contains "@"

Change key from username + "@" + host to {username, host} struct makes the code more robust.

Check List

Tests

  • Unit test
  • Integration test
  • Manual test (add detailed scripts or steps below)
  • No need to test
    • I checked and no code files have been changed.

Side effects

  • Performance regression: Consumes more CPU
  • Performance regression: Consumes more Memory
  • Breaking backward compatibility

Documentation

  • Affects user behaviors
  • Contains syntax changes
  • Contains variable changes
  • Contains experimental features
  • Changes MySQL compatibility

Release note

Please refer to Release Notes Language Style Guide to write a quality release note.

None

@ti-chi-bot ti-chi-bot Bot added the release-note-none Denotes a PR that doesn't merit a release note. label Feb 25, 2025
@ti-chi-bot ti-chi-bot Bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Feb 25, 2025
@tiprow

tiprow Bot commented Feb 25, 2025

Copy link
Copy Markdown

Hi @tiancaiamao. Thanks for your PR.

PRs from untrusted users cannot be marked as trusted with /ok-to-test in this repo meaning untrusted PR authors can never trigger tests themselves. Collaborators can still trigger tests on the PR using /test all.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@codecov

codecov Bot commented Feb 25, 2025

Copy link
Copy Markdown

Codecov Report

Attention: Patch coverage is 96.77419% with 1 line in your changes missing coverage. Please review.

Project coverage is 73.4831%. Comparing base (4cf94a7) to head (7e88b0c).
Report is 4 commits behind head on master.

Additional details and impacted files
@@               Coverage Diff                @@
##             master     #59739        +/-   ##
================================================
+ Coverage   72.9611%   73.4831%   +0.5219%     
================================================
  Files          1697       1699         +2     
  Lines        468962     469633       +671     
================================================
+ Hits         342160     345101      +2941     
+ Misses       105734     103513      -2221     
+ Partials      21068      21019        -49     
Flag Coverage Δ
integration 43.0231% <96.7741%> (?)
unit 72.2930% <96.7741%> (+0.1411%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Components Coverage Δ
dumpling 52.6910% <ø> (ø)
parser ∅ <ø> (∅)
br 45.0701% <ø> (-0.0462%) ⬇️

@tiancaiamao

Copy link
Copy Markdown
Contributor Author

/test check-dev2

@tiprow

tiprow Bot commented Feb 25, 2025

Copy link
Copy Markdown

@tiancaiamao: Cannot trigger testing until a trusted user reviews the PR and leaves an /ok-to-test message.

Details

In response to this:

/test check-dev2

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@ti-chi-bot ti-chi-bot Bot added approved needs-1-more-lgtm Indicates a PR needs 1 more LGTM. labels Feb 25, 2025

@zimulala zimulala left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ti-chi-bot

ti-chi-bot Bot commented Feb 26, 2025

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lance6716, zimulala

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ti-chi-bot ti-chi-bot Bot added lgtm and removed needs-1-more-lgtm Indicates a PR needs 1 more LGTM. labels Feb 26, 2025
@ti-chi-bot

ti-chi-bot Bot commented Feb 26, 2025

Copy link
Copy Markdown

[LGTM Timeline notifier]

Timeline:

  • 2025-02-25 12:57:41.356126912 +0000 UTC m=+360609.309285178: ☑️ agreed by lance6716.
  • 2025-02-26 02:36:21.530089199 +0000 UTC m=+409729.483247464: ☑️ agreed by zimulala.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved lgtm release-note-none Denotes a PR that doesn't merit a release note. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

role (RBAC) related code does not handle username or host with @ correctly

3 participants