5 Commits

Author	SHA1	Message	Date
Xiang Li	1bbe09eb3c	auth: clean permission checking	2016-06-10 19:23:20 -07:00
Xiang Li	f99ff5d513	auth: cleanup get perm func	2016-06-10 16:36:51 -07:00
Xiang Li	77efe4cda9	auth: clean up range_perm_cache.go	2016-06-10 15:21:04 -07:00
Xiang Li	1958598a18	auth: add getRole	2016-06-10 10:59:34 -07:00
Hitoshi Mitake	6bb96074da	auth, etcdserver: permission of range requests ... Currently the auth mechanism doesn't support permissions of range request. It just checks exact matching of key names even for range queries. This commit adds a mechanism for setting permission to range queries. Range queries are allowed if a range of the query is [begin1, end1) and the user has a permission of reading [begin2, range2) and [begin1, end2) is a subset of [begin2, range2). Range delete requests will follow the same rule.	2016-06-08 11:57:32 -07:00