Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ACL RFC for Search module #18

Open
wants to merge 6 commits into
base: main
Choose a base branch
from

Conversation

allenss-amazon
Copy link
Member

As requested, an RFC to describe the security model for the search module.

This also proposes a new module API to make the security model enforcement efficient.

allenss-amazon and others added 6 commits November 27, 2024 17:23
Signed-off-by: Allen Samuels <[email protected]>
Adding gaps relative to RediSearch section

Signed-off-by: yairgott <[email protected]>
Fixing heading of the 'Unsupported knobs and control' section

Signed-off-by: yairgott <[email protected]>
removal of links to redis.io

Signed-off-by: yairgott <[email protected]>
Signed-off-by: Allen Samuels <[email protected]>
VALKEYMODULE_PREFIX_CHECK_READ_ACCESS = 1,
}

int ValkeyModule_AclCheckKeyPrefixPermissions(ValkeyModuleContext *ctx, const char *prefix, size_t bytes, size_t flags)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. using ValkeyModuleString* data type eliminates the need for bytes. Also, it seems more aligned with ValkeyModule_ACLCheckKeyPermissions.
  2. We need to support multiple prefixes and with this interface the caller needs to loop call the this API. Consider extending the API to support variadic arguments where each argument must be a ValkeyModuleString*. .e.g.: int ValkeyModule_AclCheckKeyPrefixPermissions(ValkeyModuleContext *ctx, size_t flags, ...)

@@ -0,0 +1,518 @@
## RFC: 8

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added accidentally?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants