hubcio opened a new pull request, #4550: URL: https://github.com/apache/iggy/pull/4550
Stream, topic and user IDs are reused. Grants and HTTP credentials must stay bound to the original resource or account. Drop resource grants in the replicated delete path and reject grants on absent resources. Rebuild the permission index from the pruned users once per delete. Bind self-issued JWTs and HTTP read identities to the account creation timestamp. Recheck the account after read barriers. Resolve trusted issuer usernames per request and include the account in session keys. Drop personal access tokens left at a user ID when a new user takes it. Reads also checked their caller only before they waited. Binary reads now carry the session attachment, refuse with StaleClient once it is invalid, and run the permission rule again after each wait. HTTP reads run it again after their last wait. Trusted issuer entries take username instead of user_id, and the server refuses to start while one is empty. Tokens issued before this change are rejected, so HTTP clients must log in again. Older data directories need --fresh, because their log entries replay differently under these grant rules, and old and new replicas do not form a cluster. Cover account replacement during both read waits and preserve grants across users and snapshot restore. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
