• ranshid's avatar
    make sort/ro commands validate external keys access patterns (#10106) (#10340) · 1078e30c
    ranshid authored
    Currently the sort and sort_ro can access external keys via `GET` and `BY`
    in order to make sure the user cannot violate the authorization ACL
    rules, the decision is to reject external keys access patterns unless ACL allows
    SORT full access to all keys.
    I.e. for backwards compatibility, SORT with GET/BY keeps working, but
    if ACL has restrictions to certain keys, these features get permission denied.
    
    ### Implemented solution
    We have discussed several potential solutions and decided to only allow the GET and BY
    arguments when the user has all key permissions with the SORT command. The reasons
    being that SORT with GET or BY is problematic anyway, for instance it is not supported in
    cluster mode since it doesn't declare keys, and we're not sure the combination of that feature
    with ACL key restriction is really required.
    **HOWEVER** If in the fullness of time we will identify a real need for fine grain access
    support ...
    1078e30c
acl.c 115 KB