Isolate writes to the internal system database root.__system

Author: alpass163

example/trigger/src/main/java/org/apache/iotdb/trigger/StatisticsUpdaterTrigger.java

@@ -45,7 +45,7 @@ public class StatisticsUpdaterTrigger implements Trigger {
 
   private static final Logger LOGGER = LoggerFactory.getLogger(StatisticsUpdaterTrigger.class);
 
-  private static final String TARGET_DEVICE = "root.__system.statistics";
+  private static final String TARGET_DEVICE = "root.statistics";
 
   private static final String TARGET_SERIES = "total_count";
   private String ip;

iotdb-core/confignode/src/main/java/org/apache/iotdb/confignode/manager/ConfigManager.java

@@ -889,7 +889,7 @@ public TSchemaPartitionTableResp getSchemaPartition(
     Iterator<String> iterator = allDatabases.iterator();
     while (iterator.hasNext()) {
       String database = iterator.next();
-      if (!needAuditDB && TREE_MODEL_AUDIT_DATABASE.equalsIgnoreCase(database)) {
+      if (!needAuditDB && TREE_MODEL_AUDIT_DATABASE.equals(database)) {
         iterator.remove();
         continue;
       }

iotdb-core/confignode/src/main/java/org/apache/iotdb/confignode/persistence/partition/PartitionInfo.java

@@ -542,7 +542,7 @@ public DataSet getSchemaNodeManagementPartition(
         .filter(this::isDatabaseExisted)
         .forEach(
             database -> {
-              if (!canSeeAuditDB && Audit.TREE_MODEL_AUDIT_DATABASE.equalsIgnoreCase(database)) {
+              if (!canSeeAuditDB && Audit.TREE_MODEL_AUDIT_DATABASE.equals(database)) {
                 return;
               }
               schemaPartitionMap.put(database, new SchemaPartitionTable());

iotdb-core/confignode/src/main/java/org/apache/iotdb/confignode/persistence/subscription/SubscriptionInfo.java

@@ -450,7 +450,7 @@ private static boolean onlySelectsAuditTableDatabase(final TopicConfig topicConf
     sourceAttributes.putAll(topicConfig.getAttributesWithSourcePrefix());
 
     try {
-      return TABLE_MODEL_AUDIT_DATABASE.equalsIgnoreCase(
+      return TABLE_MODEL_AUDIT_DATABASE.equals(
           TablePattern.parsePipePatternFromSourceParameters(new TopicConfig(sourceAttributes))
               .getDatabasePattern());
     } catch (final PipeException ignored) {

iotdb-core/confignode/src/test/java/org/apache/iotdb/confignode/persistence/subscription/SubscriptionInfoTopicValidationTest.java

@@ -164,7 +164,7 @@ public void testRejectTopicThatOnlySelectsAuditDatabase() {
     assertCreateRejected(subscriptionInfo, tableAttributes, "only to the __audit database");
 
     tableAttributes.put(TopicConstant.DATABASE_KEY, "__AUDIT");
-    assertCreateRejected(subscriptionInfo, tableAttributes, "only to the __audit database");
+    assertCreateAccepted(subscriptionInfo, "table_uppercase_audit_topic", tableAttributes);
 
     tableAttributes.put(TopicConstant.DATABASE_KEY, "__audit_data");
     assertCreateAccepted(subscriptionInfo, "table_topic", tableAttributes);

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/auth/AuthorityChecker.java

@@ -226,6 +226,7 @@ public static TSStatus checkAuthority(Statement statement, IAuditEntity auditEnt
                             auditEntity.getUserId(),
                             auditEntity.getUsername(),
                             auditEntity.getCliHostname())
+                        .setInternal(auditEntity.isInternal())
                         .setSqlString(auditEntity.getSqlString()));
       }
       return status;

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/protocol/thrift/impl/DataNodeInternalRPCServiceImpl.java

@@ -3557,12 +3557,13 @@ public TSStatus insertRecord(TSInsertRecordReq req) throws TException {
       InsertRowStatement statement = StatementGenerator.createStatement(req);
       SessionInfo sessionInfo =
           new SessionInfo(
-              0,
-              new UserEntity(
-                  AuthorityChecker.SUPER_USER_ID,
-                  AuthorityChecker.SUPER_USER,
-                  IoTDBDescriptor.getInstance().getConfig().getInternalAddress()),
-              ZoneId.systemDefault());
+                  0,
+                  new UserEntity(
+                      AuthorityChecker.SUPER_USER_ID,
+                      AuthorityChecker.SUPER_USER,
+                      IoTDBDescriptor.getInstance().getConfig().getInternalAddress()),
+                  ZoneId.systemDefault())
+              .setInternal(true);
 
       long queryId = SESSION_MANAGER.requestQueryId();
       ExecutionResult result =

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/common/MPPQueryContext.java

@@ -1086,6 +1086,11 @@ public String getUsername() {
     return session.getUserName();
   }
 
+  @Override
+  public boolean isInternal() {
+    return session != null && session.isInternal();
+  }
+
   @Override
   public String getCliHostname() {
     if (session == null || session.getCliHostname() == null) {

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/analyze/AnalyzeUtils.java

@@ -20,7 +20,9 @@
 package org.apache.iotdb.db.queryengine.plan.analyze;
 
 import org.apache.iotdb.common.rpc.thrift.TRegionReplicaSet;
+import org.apache.iotdb.common.rpc.thrift.TSStatus;
 import org.apache.iotdb.common.rpc.thrift.TTimePartitionSlot;
+import org.apache.iotdb.commons.audit.IAuditEntity;
 import org.apache.iotdb.commons.exception.IoTDBException;
 import org.apache.iotdb.commons.exception.IoTDBRuntimeException;
 import org.apache.iotdb.commons.exception.SemanticException;
@@ -56,6 +58,7 @@
 import org.apache.iotdb.db.queryengine.plan.relational.metadata.fetcher.TableDeviceSchemaFetcher;
 import org.apache.iotdb.db.queryengine.plan.relational.planner.ir.ExpressionRewriter;
 import org.apache.iotdb.db.queryengine.plan.relational.planner.ir.ExpressionTreeRewriter;
+import org.apache.iotdb.db.queryengine.plan.relational.security.TreeAccessCheckVisitor;
 import org.apache.iotdb.db.queryengine.plan.relational.sql.ast.Delete;
 import org.apache.iotdb.db.queryengine.plan.relational.sql.ast.TimeRange;
 import org.apache.iotdb.db.queryengine.plan.statement.crud.InsertBaseStatement;
@@ -168,7 +171,9 @@ public static InsertBaseStatement analyzeInsert(
     validateSchema(analysis, insertBaseStatement, schemaValidation);
 
     InsertBaseStatement realStatement =
-        removeLogicalView ? removeLogicalView(analysis, insertBaseStatement) : insertBaseStatement;
+        removeLogicalView
+            ? removeLogicalView(analysis, insertBaseStatement, context)
+            : insertBaseStatement;
     if (analysis.isFinishQueryAfterAnalyze()) {
       return realStatement;
     }
@@ -343,9 +348,19 @@ public static void validateSchema(
   }
 
   public static InsertBaseStatement removeLogicalView(
-      IAnalysis analysis, InsertBaseStatement insertBaseStatement) {
+      IAnalysis analysis, InsertBaseStatement insertBaseStatement, IAuditEntity context) {
     try {
-      return insertBaseStatement.removeLogicalView();
+      final InsertBaseStatement realStatement = insertBaseStatement.removeLogicalView();
+      // Inserts into a logical view are rewritten to the view's source series. Check the real
+      // target paths so a view created before this restriction cannot write root.__system.
+      final TSStatus systemDatabaseStatus =
+          TreeAccessCheckVisitor.checkSystemDatabaseWrite(
+              context, realStatement.getDevicePathsStream().toList());
+      if (systemDatabaseStatus != null) {
+        analysis.setFinishQueryAfterAnalyze(true);
+        analysis.setFailStatus(systemDatabaseStatus);
+      }
+      return realStatement;
     } catch (SemanticException e) {
       analysis.setFinishQueryAfterAnalyze(true);
       if (e.getCause() instanceof IoTDBException) {

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/analyze/AnalyzeVisitor.java

@@ -87,6 +87,7 @@
 import org.apache.iotdb.db.queryengine.plan.planner.plan.parameter.GroupByVariationParameter;
 import org.apache.iotdb.db.queryengine.plan.planner.plan.parameter.IntoPathDescriptor;
 import org.apache.iotdb.db.queryengine.plan.planner.plan.parameter.OrderByParameter;
+import org.apache.iotdb.db.queryengine.plan.relational.security.TreeAccessCheckVisitor;
 import org.apache.iotdb.db.queryengine.plan.statement.StatementNode;
 import org.apache.iotdb.db.queryengine.plan.statement.StatementVisitor;
 import org.apache.iotdb.db.queryengine.plan.statement.component.FillComponent;
@@ -2903,7 +2904,8 @@ public Analysis visitInsertRow(InsertRowStatement insertRowStatement, MPPQueryCo
         analysis,
         insertRowStatement,
         () -> SchemaValidator.validate(schemaFetcher, insertRowStatement, context));
-    InsertBaseStatement realInsertStatement = removeLogicalView(analysis, insertRowStatement);
+    InsertBaseStatement realInsertStatement =
+        removeLogicalView(analysis, insertRowStatement, context);
     if (analysis.isFinishQueryAfterAnalyze()) {
       return analysis;
     }
@@ -2943,7 +2945,7 @@ public Analysis visitInsertRows(
         insertRowsStatement,
         () -> SchemaValidator.validate(schemaFetcher, insertRowsStatement, context));
     InsertRowsStatement realInsertRowsStatement =
-        (InsertRowsStatement) removeLogicalView(analysis, insertRowsStatement);
+        (InsertRowsStatement) removeLogicalView(analysis, insertRowsStatement, context);
     if (analysis.isFinishQueryAfterAnalyze()) {
       return analysis;
     }
@@ -2968,7 +2970,8 @@ public Analysis visitInsertMultiTablets(
         insertMultiTabletsStatement,
         () -> SchemaValidator.validate(schemaFetcher, insertMultiTabletsStatement, context));
     InsertMultiTabletsStatement realStatement =
-        (InsertMultiTabletsStatement) removeLogicalView(analysis, insertMultiTabletsStatement);
+        (InsertMultiTabletsStatement)
+            removeLogicalView(analysis, insertMultiTabletsStatement, context);
     if (analysis.isFinishQueryAfterAnalyze()) {
       return analysis;
     }
@@ -2993,7 +2996,7 @@ public Analysis visitInsertRowsOfOneDevice(
         insertRowsOfOneDeviceStatement,
         () -> SchemaValidator.validate(schemaFetcher, insertRowsOfOneDeviceStatement, context));
     InsertBaseStatement realInsertStatement =
-        removeLogicalView(analysis, insertRowsOfOneDeviceStatement);
+        removeLogicalView(analysis, insertRowsOfOneDeviceStatement, context);
     if (analysis.isFinishQueryAfterAnalyze()) {
       return analysis;
     }
@@ -3725,6 +3728,15 @@ public Analysis visitDeleteData(
         }
       }
       deleteDataStatement.setPathList(new ArrayList<>(deletePatternSet));
+      // Deletes through a writable view are rewritten to the view's source series as well.
+      final TSStatus systemDatabaseStatus =
+          TreeAccessCheckVisitor.checkSystemDatabaseWrite(
+              context, deleteDataStatement.getPathList());
+      if (systemDatabaseStatus != null) {
+        analysis.setFinishQueryAfterAnalyze(true);
+        analysis.setFailStatus(systemDatabaseStatus);
+        return analysis;
+      }
     } else {
       for (PartialPath devicePattern : patternTree.getAllDevicePaths()) {
         schemaTree