Method getInstanceRoles

backend/plugin/db/tidb/role.go:15–45

(ctx context.Context)

)

func (d *Driver) getInstanceRoles(ctx context.Context) []*storepb.InstanceRole {
	var instanceRoles []*storepb.InstanceRole
	var users []string
	var err error
	users, err = d.getUsersFromMySQLUser(ctx)
	if err != nil {
		slog.Info("failed to get users", log.BBError(err))
		users, err = d.getUsersFromUserAttributes(ctx)
		if err != nil {
			slog.Info("failed to get users", log.BBError(err))
			return nil
		}
	}

	// Uses single quote instead of backtick to escape because this is a string
	// instead of table (which should use backtick instead). MySQL actually works
	// in both ways. On the other hand, some other MySQL compatible engines might not (OceanBase in this case).
	for _, name := range users {
		grantList, err := d.getGrantFromUser(ctx, name)
		if err != nil {
			slog.Info("failed to get grants for user", slog.String("user", name), log.BBError(err))
			continue
		}
		attribute := strings.Join(grantList, "\n")
		instanceRoles = append(instanceRoles, &storepb.InstanceRole{
			Name:      name,
			Attribute: &attribute,
		})
	}
	return instanceRoles
}

// getGrantFromUser reads grants for user with format "'<user>'@'<host>'".
func (d *Driver) getGrantFromUser(ctx context.Context, name string) ([]string, error) {