• zhaozhao.zz's avatar
    ACL: add masteruser configuration for replication · ea9d3aef
    zhaozhao.zz authored
    In mostly production environment, normal user's behavior should be
    limited.
    
    Now in redis ACL mechanism we can do it like that:
    
        user default on +@all ~* -@dangerous nopass
        user admin on +@all ~* >someSeriousPassword
    
    Then the default normal user can not execute dangerous commands like
    FLUSHALL/KEYS.
    
    But some admin commands are in dangerous category too like PSYNC,
    and the configurations above will forbid replica from sync with master.
    
    Finally I think we could add a new configuration for replication,
    it is masteruser option, like this:
    
        masteruser admin
        masterauth someSeriousPassword
    
    Then replica will try AUTH admin someSeriousPassword and get privilege
    to execute PSYNC. If masteruser is NULL, replica would AUTH with only
    masterauth like before.
    ea9d3aef
server.h 101 KB