mirror of https://github.com/citusdata/citus.git
3dae284bbe
So far we've always used libpq defaults when connecting to workers; bar special environment variables being set that'll always be the user that started the server. That's not desirable because it prevents using users with fewer privileges. Thus change the various APIs creating connections to workers to always use usernames. That means: 1) MultiClientConnect() needs to, optionally, accept a username 2) GetOrEstablishConnection(), including the underlying cache, need to use the current user as part of the connection cache key. That way connections for separate users are distinct, and we always use one with the correct authorization. 3) The task tracker needs to keep track of the username associated with a task, so it can use it when establishing connections outside the originating session. |
||
|---|---|---|
| .. | ||
| commands | ||
| executor | ||
| master | ||
| planner | ||
| relay | ||
| test | ||
| utils | ||
| worker | ||
| .gitignore | ||
| Makefile | ||
| citus.control | ||
| citus.sql | ||
| shared_library_init.c | ||