Audit log: No permission to connect to the database #12287

azevaykin · 2024-12-04T14:37:51Z

Changelog entry

When a user tries to connect without the necessary permissions, this error is returned:

Status: UNAUTHORIZED
Issues: 
<<main>: Error: User has no permission to perform query on this database, database: /Domain 0/testdb, user: bigpig1-no access@ldap, from ip: ipv4:10.131.0.31:34736, code: 200000
<main>: Error: Endpoint list is empty for database /Domain0/testdb, cluster endpoint bigpig1:2135.

In this case, nothing is written to the console log.

What has been fixed:

The user does not need to see such a detailed error, it is enough to say “Access Denied”
A detailed message should be recorded in the audit log

The result console message is:

Status: UNAUTHORIZED
Issues:
<main>: Error: No permission to connect to the databased, code: 200000
<main>: Error: Endpoint list is empty for database /local, cluster endpoint localhost:19140.

Changelog category

Bugfix

Additional information

...

github-actions · 2024-12-04T14:40:21Z

⚪ 2024-12-04 14:40:21 UTC Pre-commit check linux-x86_64-relwithdebinfo for 5dbb0a3 has started.
⚪ 2024-12-04 14:40:32 UTC Artifacts will be uploaded here
⚪ 2024-12-04 14:43:26 UTC ya make is running...
🟡 2024-12-04 15:48:10 UTC Some tests failed, follow the links below. Going to retry failed tests...

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
20955	19445	0	4	1396	110

⚪ 2024-12-04 15:50:01 UTC ya make is running... (failed tests rerun, try 2)
🟢 2024-12-04 16:01:38 UTC Tests successful.

Test history | Ya make output | Test bloat | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
722 (only retried tests)	617	0	0	0	105

🟢 2024-12-04 16:01:52 UTC Build successful.
🟡 2024-12-04 16:02:12 UTC ydbd size 2.5 GiB changed* by +269.1 KiB, which is >= 100.0 KiB vs main: Warning

ydbd size dash	main: `ff307c7`	merge: `5dbb0a3`	diff	diff %
ydbd size	2 702 135 600 Bytes	2 702 411 160 Bytes	+269.1 KiB	+0.010%
ydbd stripped size	483 636 944 Bytes	483 654 448 Bytes	+17.1 KiB	+0.004%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

github-actions · 2024-12-04T14:43:29Z

⚪ 2024-12-04 14:43:29 UTC Pre-commit check linux-x86_64-release-asan for 5dbb0a3 has started.
⚪ 2024-12-04 14:43:40 UTC Artifacts will be uploaded here
⚪ 2024-12-04 14:46:43 UTC ya make is running...
🟡 2024-12-04 16:21:02 UTC Some tests failed, follow the links below. This fail is not in blocking policy yet

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
13239	13166	0	21	8	44

🟢 2024-12-04 16:22:06 UTC Build successful.
🟢 2024-12-04 16:22:35 UTC ydbd size 4.9 GiB changed* by -182.4 KiB, which is <= 0 Bytes vs main: OK

ydbd size dash	main: `4f34c1a`	merge: `5dbb0a3`	diff	diff %
ydbd size	5 309 573 408 Bytes	5 309 386 608 Bytes	-182.4 KiB	-0.004%
ydbd stripped size	1 365 834 672 Bytes	1 365 807 920 Bytes	-26.1 KiB	-0.002%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

github-actions · 2024-12-05T14:29:37Z

⚪ 2024-12-05 14:29:36 UTC Pre-commit check linux-x86_64-relwithdebinfo for 7c12f6c has started.
⚪ 2024-12-05 14:29:42 UTC Artifacts will be uploaded here
⚪ 2024-12-05 14:32:42 UTC ya make is running...
🟡 2024-12-05 15:23:44 UTC Some tests failed, follow the links below. Going to retry failed tests...

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
20969	19456	0	4	1396	113

⚪ 2024-12-05 15:25:25 UTC ya make is running... (failed tests rerun, try 2)
🟢 2024-12-05 15:37:24 UTC Tests successful.

Test history | Ya make output | Test bloat | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
734 (only retried tests)	626	0	0	0	108

🟢 2024-12-05 15:37:33 UTC Build successful.
🟢 2024-12-05 15:37:53 UTC ydbd size 2.5 GiB changed* by -56.3 KiB, which is <= 0 Bytes vs main: OK

ydbd size dash	main: `e09f258`	merge: `7c12f6c`	diff	diff %
ydbd size	2 700 780 288 Bytes	2 700 722 672 Bytes	-56.3 KiB	-0.002%
ydbd stripped size	483 690 480 Bytes	483 670 320 Bytes	-19.7 KiB	-0.004%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

github-actions · 2024-12-05T14:30:54Z

⚪ 2024-12-05 14:30:53 UTC Pre-commit check linux-x86_64-release-asan for 7c12f6c has started.
⚪ 2024-12-05 14:31:29 UTC Artifacts will be uploaded here
⚪ 2024-12-05 14:34:53 UTC ya make is running...
🟡 2024-12-05 15:36:45 UTC Some tests failed, follow the links below. This fail is not in blocking policy yet

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
13253	13180	0	19	9	45

🟢 2024-12-05 15:37:52 UTC Build successful.
🟢 2024-12-05 15:38:18 UTC ydbd size 4.9 GiB changed* by -186.4 KiB, which is <= 0 Bytes vs main: OK

ydbd size dash	main: `e09f258`	merge: `7c12f6c`	diff	diff %
ydbd size	5 306 183 384 Bytes	5 305 992 544 Bytes	-186.4 KiB	-0.004%
ydbd stripped size	1 365 792 560 Bytes	1 365 761 712 Bytes	-30.1 KiB	-0.002%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

ydb/core/grpc_services/audit_log.h

ydb/core/grpc_services/audit_log.cpp

ydb/core/grpc_services/grpc_request_check_actor.h

github-actions · 2024-12-06T13:07:05Z

⚪ 2024-12-06 13:07:05 UTC Pre-commit check linux-x86_64-relwithdebinfo for 187182b has started.
⚪ 2024-12-06 13:07:16 UTC Artifacts will be uploaded here
⚪ 2024-12-06 13:10:09 UTC ya make is running...
⚫ 2024-12-06 13:10:14 UTC Check cancelled

github-actions · 2024-12-06T13:09:30Z

⚪ 2024-12-06 13:09:30 UTC Pre-commit check linux-x86_64-release-asan for 187182b has started.
⚪ 2024-12-06 13:09:40 UTC Artifacts will be uploaded here
⚫ 2024-12-06 13:10:17 UTC Check cancelled

github-actions · 2024-12-06T13:12:01Z

⚪ 2024-12-06 13:12:01 UTC Pre-commit check linux-x86_64-relwithdebinfo for 943f673 has started.
⚪ 2024-12-06 13:12:04 UTC Artifacts will be uploaded here
⚪ 2024-12-06 13:14:55 UTC ya make is running...
🟡 2024-12-06 14:04:01 UTC Some tests failed, follow the links below. Going to retry failed tests...

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
20973	19462	0	2	1397	112

⚪ 2024-12-06 14:05:42 UTC ya make is running... (failed tests rerun, try 2)
🟢 2024-12-06 14:17:40 UTC Tests successful.

Test history | Ya make output | Test bloat | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
708 (only retried tests)	602	0	0	0	106

🟢 2024-12-06 14:17:49 UTC Build successful.
🟢 2024-12-06 14:18:08 UTC ydbd size 2.5 GiB changed* by +31.4 KiB, which is < 100.0 KiB vs main: OK

ydbd size dash	main: `17066f1`	merge: `943f673`	diff	diff %
ydbd size	2 699 201 576 Bytes	2 699 233 776 Bytes	+31.4 KiB	+0.001%
ydbd stripped size	483 500 720 Bytes	483 501 488 Bytes	+768 Bytes	+0.000%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

github-actions · 2024-12-06T13:12:15Z

⚪ 2024-12-06 13:12:14 UTC Pre-commit check linux-x86_64-release-asan for 943f673 has started.
⚪ 2024-12-06 13:12:26 UTC Artifacts will be uploaded here
⚪ 2024-12-06 13:15:19 UTC ya make is running...
🟡 2024-12-06 14:19:45 UTC Some tests failed, follow the links below. This fail is not in blocking policy yet

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
13256	13195	0	12	5	44

🟢 2024-12-06 14:20:49 UTC Build successful.
🟡 2024-12-06 14:21:20 UTC ydbd size 4.9 GiB changed* by +119.4 KiB, which is >= 100.0 KiB vs main: Warning

ydbd size dash	main: `17066f1`	merge: `943f673`	diff	diff %
ydbd size	5 305 570 352 Bytes	5 305 692 624 Bytes	+119.4 KiB	+0.002%
ydbd stripped size	1 365 574 736 Bytes	1 365 599 760 Bytes	+24.4 KiB	+0.002%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

ydb/core/grpc_services/grpc_request_check_actor.h

github-actions · 2024-12-09T07:20:55Z

⚪ 2024-12-09 07:20:55 UTC Pre-commit check linux-x86_64-relwithdebinfo for 75ac4fe has started.
⚪ 2024-12-09 07:21:07 UTC Artifacts will be uploaded here
⚪ 2024-12-09 07:24:01 UTC ya make is running...
🟡 2024-12-09 08:12:27 UTC Some tests failed, follow the links below. Going to retry failed tests...

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
20985	19465	0	1	1408	111

⚪ 2024-12-09 08:14:09 UTC ya make is running... (failed tests rerun, try 2)
🟢 2024-12-09 08:26:00 UTC Tests successful.

Test history | Ya make output | Test bloat | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
648 (only retried tests)	542	0	0	0	106

🟢 2024-12-09 08:26:10 UTC Build successful.
🟢 2024-12-09 08:26:28 UTC ydbd size 2.5 GiB changed* by +29.2 KiB, which is < 100.0 KiB vs main: OK

ydbd size dash	main: `1382681`	merge: `75ac4fe`	diff	diff %
ydbd size	2 699 417 000 Bytes	2 699 446 904 Bytes	+29.2 KiB	+0.001%
ydbd stripped size	483 519 568 Bytes	483 520 080 Bytes	+512 Bytes	+0.000%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

github-actions · 2024-12-09T07:20:59Z

⚪ 2024-12-09 07:20:59 UTC Pre-commit check linux-x86_64-release-asan for 75ac4fe has started.
⚪ 2024-12-09 07:21:09 UTC Artifacts will be uploaded here
⚪ 2024-12-09 07:24:02 UTC ya make is running...
🟡 2024-12-09 08:32:44 UTC Some tests failed, follow the links below. This fail is not in blocking policy yet

Test history | Ya make output | Test bloat

TESTS	PASSED	ERRORS	FAILED	SKIPPED	MUTED^?
13268	13174	0	26	18	50

🟢 2024-12-09 08:33:49 UTC Build successful.
🟡 2024-12-09 08:34:20 UTC ydbd size 4.9 GiB changed* by +116.9 KiB, which is >= 100.0 KiB vs main: Warning

ydbd size dash	main: `1382681`	merge: `75ac4fe`	diff	diff %
ydbd size	5 305 993 888 Bytes	5 306 113 568 Bytes	+116.9 KiB	+0.002%
ydbd stripped size	1 365 623 632 Bytes	1 365 648 080 Bytes	+23.9 KiB	+0.002%

^{*please be aware that the difference is based on comparing your commit and the last completed build from the post-commit, check comparation}

github-actions bot added the bugfix label Dec 4, 2024

azevaykin requested a review from ijon December 4, 2024 14:42

azevaykin added 2 commits December 5, 2024 14:13

Audit log for "Access Denied"

9eed3e7

Test fix

a42b9b8

azevaykin force-pushed the KIKIMR-22293-ConnectLogs branch from a0fa28d to a42b9b8 Compare December 5, 2024 14:27

ijon requested changes Dec 6, 2024

View reviewed changes

github-actions bot added bugfix and removed bugfix labels Dec 6, 2024

Review fixes

30d2f15

azevaykin requested a review from ijon December 6, 2024 13:07

Log fix

bd3ac9b

azevaykin changed the title ~~Audit log for "Access Denied"~~ Audit log for "No permission to connect to the database" Dec 6, 2024

github-actions bot added bugfix and removed bugfix labels Dec 6, 2024

azevaykin changed the title ~~Audit log for "No permission to connect to the database"~~ Audit log: No permission to connect to the database Dec 6, 2024

github-actions bot added bugfix and removed bugfix labels Dec 6, 2024

ijon reviewed Dec 6, 2024

View reviewed changes

ydb/core/grpc_services/grpc_request_check_actor.h Outdated Show resolved Hide resolved

Remove AUDIT

a1852a1

azevaykin requested a review from ijon December 9, 2024 07:17

ijon approved these changes Dec 10, 2024

View reviewed changes

azevaykin merged commit 68a09a0 into ydb-platform:main Dec 10, 2024
10 checks passed

azevaykin deleted the KIKIMR-22293-ConnectLogs branch December 10, 2024 10:57

This was referenced Dec 11, 2024

YQ-3926 RD added parallel purecalc compilation #12505

Merged

YQ-3975 RD fixed fault for parsing errors without filter #12707

Merged

niksaveliev mentioned this pull request Dec 25, 2024

Kafka connect distributed #12960

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Audit log: No permission to connect to the database #12287

Audit log: No permission to connect to the database #12287

azevaykin commented Dec 4, 2024 •

edited

Loading

github-actions bot commented Dec 4, 2024 •

edited

Loading

github-actions bot commented Dec 4, 2024 •

edited

Loading

github-actions bot commented Dec 5, 2024 •

edited

Loading

github-actions bot commented Dec 5, 2024 •

edited

Loading

github-actions bot commented Dec 6, 2024 •

edited

Loading

github-actions bot commented Dec 6, 2024 •

edited

Loading

github-actions bot commented Dec 6, 2024 •

edited

Loading

github-actions bot commented Dec 6, 2024 •

edited

Loading

github-actions bot commented Dec 9, 2024 •

edited

Loading

github-actions bot commented Dec 9, 2024 •

edited

Loading

Audit log: No permission to connect to the database #12287

Audit log: No permission to connect to the database #12287

Conversation

azevaykin commented Dec 4, 2024 • edited Loading

Changelog entry

Changelog category

Additional information

github-actions bot commented Dec 4, 2024 • edited Loading

github-actions bot commented Dec 4, 2024 • edited Loading

github-actions bot commented Dec 5, 2024 • edited Loading

github-actions bot commented Dec 5, 2024 • edited Loading

github-actions bot commented Dec 6, 2024 • edited Loading

github-actions bot commented Dec 6, 2024 • edited Loading

github-actions bot commented Dec 6, 2024 • edited Loading

github-actions bot commented Dec 6, 2024 • edited Loading

github-actions bot commented Dec 9, 2024 • edited Loading

github-actions bot commented Dec 9, 2024 • edited Loading

azevaykin commented Dec 4, 2024 •

edited

Loading

github-actions bot commented Dec 4, 2024 •

edited

Loading

github-actions bot commented Dec 4, 2024 •

edited

Loading

github-actions bot commented Dec 5, 2024 •

edited

Loading

github-actions bot commented Dec 5, 2024 •

edited

Loading

github-actions bot commented Dec 6, 2024 •

edited

Loading

github-actions bot commented Dec 6, 2024 •

edited

Loading

github-actions bot commented Dec 6, 2024 •

edited

Loading

github-actions bot commented Dec 6, 2024 •

edited

Loading

github-actions bot commented Dec 9, 2024 •

edited

Loading

github-actions bot commented Dec 9, 2024 •

edited

Loading