IAM decision history

Signed-off-by: mohitkhullar <[email protected]>

Author: mohitkhullar

db/comdb2.c

@@ -245,6 +245,7 @@ int gbl_authentication_cache_ageout = 900;
 int gbl_authorization_cache_ageout = 600;
 int gbl_cache_authz_perms = 1;
 int gbl_iam_verbosity = 0;
+int gbl_iam_decision_history = 0;
 int gbl_use_sp_resource = 0;
 int gbl_upd_key;
 unsigned long long gbl_sqltick;

db/comdb2.h

@@ -1647,6 +1647,7 @@ extern int gbl_authentication_cache_ageout;
 extern int gbl_authorization_cache_ageout;
 extern int gbl_cache_authz_perms;
 extern int gbl_iam_verbosity;
+extern int gbl_iam_decision_history;
 extern int gbl_use_sp_resource;
 extern char* gbl_foreign_metadb;
 extern char* gbl_foreign_metadb_class;

db/db_tunables.h

@@ -2416,6 +2416,9 @@ REGISTER_TUNABLE("authorization_cache_ageout", "Max age of authorization cache (
 REGISTER_TUNABLE("iam_usermetric_verbosity", "IAM user metric verbosity [Default: 0 (off)]", TUNABLE_INTEGER,
                  &gbl_iam_verbosity, 0, NULL, NULL, NULL, NULL);
 
+REGISTER_TUNABLE("iam_decision_history", "Enable IAM decision history [Default: 0 (off)]", TUNABLE_INTEGER,
+                 &gbl_iam_decision_history, 0, NULL, NULL, NULL, NULL);
+
 REGISTER_TUNABLE("iam_allow_sp_resource", "Allow stored-procedure as IAM resource [Default: 0 (off)]", TUNABLE_INTEGER,
                  &gbl_use_sp_resource, 0, NULL, NULL, NULL, NULL);
 

tests/tunables.test/t00_all_tunables.expected

@@ -427,6 +427,7 @@
 (name='iam_allow_sp_resource', description='Allow stored-procedure as IAM resource [Default: 0 (off)]', type='INTEGER', value='0', read_only='N')
 (name='iam_base_bri', description='base resource identifier for IAM', type='STRING', value=NULL, read_only='Y')
 (name='iam_dbname', description='override dbname for IAM', type='STRING', value=NULL, read_only='Y')
+(name='iam_decision_history', description='Enable IAM decision history [Default: 0 (off)]', type='INTEGER', value='0', read_only='N')
 (name='iam_usermetric_verbosity', description='IAM user metric verbosity [Default: 0 (off)]', type='INTEGER', value='0', read_only='N')
 (name='ignore_bad_table', description='Allow a database with a corrupt table to come up, without that table.', type='BOOLEAN', value='OFF', read_only='N')
 (name='ignore_datetime_cast_failures', description='ignore_datetime_cast_failures', type='BOOLEAN', value='OFF', read_only='N')