]> granicus.if.org Git - pdns/log
pdns
7 years agoRemove unused struct QueryInfo
Chris Hofstaedtler [Tue, 9 Jan 2018 19:04:06 +0000 (20:04 +0100)]
Remove unused struct QueryInfo

7 years agoMerge pull request #6137 from rgacogne/rec-cname-glue
aerique [Tue, 9 Jan 2018 10:36:45 +0000 (11:36 +0100)]
Merge pull request #6137 from rgacogne/rec-cname-glue

rec: Don't validate signature for "glue" CNAME

7 years agoMerge pull request #6158 from cmouse/consumed
Peter van Dijk [Tue, 9 Jan 2018 09:34:42 +0000 (10:34 +0100)]
Merge pull request #6158 from cmouse/consumed

pdns: Improve record parsing

7 years agoMerge pull request #6147 from zeha/dnsdist-ercode
Remi Gacogne [Tue, 9 Jan 2018 07:40:45 +0000 (08:40 +0100)]
Merge pull request #6147 from zeha/dnsdist-ercode

Add ERCodeRule

7 years agoMerge pull request #6018 from mind04/escape
Peter van Dijk [Mon, 8 Jan 2018 17:44:09 +0000 (18:44 +0100)]
Merge pull request #6018 from mind04/escape

escaping unusual DNS label octets in DNSName is off by one

7 years agoMerge pull request #6003 from zeha/dnsdist-packetcache-ttlcap
Remi Gacogne [Mon, 8 Jan 2018 17:01:28 +0000 (18:01 +0100)]
Merge pull request #6003 from zeha/dnsdist-packetcache-ttlcap

Add TempFailureCacheTTLAction

7 years agoClarify where offset comes from
Chris Hofstaedtler [Mon, 8 Jan 2018 15:19:37 +0000 (16:19 +0100)]
Clarify where offset comes from

7 years agoUse c++-style casts
Chris Hofstaedtler [Mon, 8 Jan 2018 15:19:22 +0000 (16:19 +0100)]
Use c++-style casts

7 years agoDo not pretty-print out-of-range RCodes
Chris Hofstaedtler [Mon, 8 Jan 2018 15:16:57 +0000 (16:16 +0100)]
Do not pretty-print out-of-range RCodes

7 years agoAdd a unit test for the label escape issue fixed in #6018
Remi Gacogne [Wed, 29 Nov 2017 10:44:57 +0000 (11:44 +0100)]
Add a unit test for the label escape issue fixed in #6018

7 years agoStore rcodes as unsigned
Chris Hofstaedtler [Mon, 8 Jan 2018 15:09:45 +0000 (16:09 +0100)]
Store rcodes as unsigned

7 years agotestcase: do not add "unused" response to queue
Chris Hofstaedtler [Mon, 8 Jan 2018 14:57:00 +0000 (15:57 +0100)]
testcase: do not add "unused" response to queue

7 years agoFix incorrect comment in testcase
Chris Hofstaedtler [Mon, 8 Jan 2018 14:56:15 +0000 (15:56 +0100)]
Fix incorrect comment in testcase

7 years agoMerge pull request #5979 from mind04/logstring
Peter van Dijk [Mon, 8 Jan 2018 14:44:37 +0000 (15:44 +0100)]
Merge pull request #5979 from mind04/logstring

Use toLogString() for logging and throwing

7 years agorec: Add unit tests to make sure we correctly detect an unsigned DS
Remi Gacogne [Mon, 8 Jan 2018 14:43:47 +0000 (15:43 +0100)]
rec: Add unit tests to make sure we correctly detect an unsigned DS

7 years agoMerge pull request #6156 from zeha/rm-ednsping
Peter van Dijk [Mon, 8 Jan 2018 14:34:14 +0000 (15:34 +0100)]
Merge pull request #6156 from zeha/rm-ednsping

Remove obsolete EDNS PING code

7 years agoMerge pull request #6143 from pieterlexis/doc-bench-db
Peter van Dijk [Mon, 8 Jan 2018 14:33:25 +0000 (15:33 +0100)]
Merge pull request #6143 from pieterlexis/doc-bench-db

pdnsutil.1: document 'bench-db'

7 years agopdns: RecordTextReader - trim whitespace
Aki Tuomi [Mon, 8 Jan 2018 10:34:00 +0000 (12:34 +0200)]
pdns: RecordTextReader - trim whitespace

DNS records should not care if there is whitespace around them.

7 years agopdns: Improve error when record data is not consumed
Aki Tuomi [Mon, 8 Jan 2018 10:27:48 +0000 (12:27 +0200)]
pdns: Improve error when record data is not consumed

Old: "All data was not consumed"
New: "When parsing <qtype> trailing data was not parsed: '<remaining>'"

7 years agoMerge pull request #6155 from zeha/ednsopts
Remi Gacogne [Mon, 8 Jan 2018 09:40:51 +0000 (10:40 +0100)]
Merge pull request #6155 from zeha/ednsopts

Update EDNS Option code list

7 years agoMerge pull request #6146 from tih/netbsd-fixes
Peter van Dijk [Mon, 8 Jan 2018 08:48:54 +0000 (09:48 +0100)]
Merge pull request #6146 from tih/netbsd-fixes

Changes to compile and run on NetBSD

7 years agoRemove obsolete EDNS PING code
Chris Hofstaedtler [Sun, 7 Jan 2018 23:50:24 +0000 (00:50 +0100)]
Remove obsolete EDNS PING code

7 years agoUpdate EDNS Option code list
Chris Hofstaedtler [Sun, 7 Jan 2018 23:41:05 +0000 (00:41 +0100)]
Update EDNS Option code list

7 years agodnsdist: add docs, test for TempFailureCacheTTLAction
Chris Hofstaedtler [Sat, 6 Jan 2018 00:15:50 +0000 (01:15 +0100)]
dnsdist: add docs, test for TempFailureCacheTTLAction

7 years agodnsdist: Expose tempFailureTTL to Lua
Chris Hofstaedtler [Sat, 6 Jan 2018 00:01:19 +0000 (01:01 +0100)]
dnsdist: Expose tempFailureTTL to Lua

7 years agoMerge pull request #4547 from zeha/soaedit-cleanup
bert hubert [Fri, 5 Jan 2018 23:27:47 +0000 (00:27 +0100)]
Merge pull request #4547 from zeha/soaedit-cleanup

Remove serializeSOAData, refactor calculate/edit/increaseSOA

7 years agoINCEPTION-INCREMENT: avoid jumping by two on every increase
Christian Hofstaedtler [Thu, 6 Oct 2016 22:04:40 +0000 (00:04 +0200)]
INCEPTION-INCREMENT: avoid jumping by two on every increase

Fixes #2377 (which is now also seen by pdnsutil increase-serial).

7 years agoHave a test for SOA-EDIT-INCREASE via the API
Christian Hofstaedtler [Thu, 6 Oct 2016 21:14:52 +0000 (23:14 +0200)]
Have a test for SOA-EDIT-INCREASE via the API

7 years agoserialtweaker: remove fallback, make DEFAULT an explicit choice
Christian Hofstaedtler [Thu, 6 Oct 2016 21:03:17 +0000 (23:03 +0200)]
serialtweaker: remove fallback, make DEFAULT an explicit choice

Improves pdnsutil increase-serial, and helps the API being more strict.

7 years agoRemove serializeSOAData, refactor calculate/edit/increaseSOA
Christian Hofstaedtler [Thu, 6 Oct 2016 22:10:16 +0000 (00:10 +0200)]
Remove serializeSOAData, refactor calculate/edit/increaseSOA

7 years agoAdd ERCodeRule
Chris Hofstaedtler [Fri, 5 Jan 2018 17:00:57 +0000 (18:00 +0100)]
Add ERCodeRule

7 years agoChanges to compile and run on NetBSD
Tom Ivar Helbekkmo [Fri, 5 Jan 2018 13:24:08 +0000 (14:24 +0100)]
Changes to compile and run on NetBSD

7 years agopdnsutil.1: document 'bench-db'
Pieter Lexis [Thu, 4 Jan 2018 17:02:39 +0000 (18:02 +0100)]
pdnsutil.1: document 'bench-db'

7 years agoMerge pull request #6063 from cyclops1982/3760
Peter van Dijk [Thu, 4 Jan 2018 14:23:43 +0000 (15:23 +0100)]
Merge pull request #6063 from cyclops1982/3760

Add colour to diff output of pdnsutil

7 years agoMerge pull request #6130 from pieterlexis/2018
Peter van Dijk [Thu, 4 Jan 2018 14:21:29 +0000 (15:21 +0100)]
Merge pull request #6130 from pieterlexis/2018

Update copyright years to 2018

7 years agoMerge pull request #6127 from cmouse/fix-deps
Pieter Lexis [Thu, 4 Jan 2018 12:29:44 +0000 (13:29 +0100)]
Merge pull request #6127 from cmouse/fix-deps

pdns: Fix dependency tracking for backends

7 years agoMerge pull request #6124 from stbuehler/improve-tests-and-two-bugfixes
Pieter Lexis [Thu, 4 Jan 2018 12:28:41 +0000 (13:28 +0100)]
Merge pull request #6124 from stbuehler/improve-tests-and-two-bugfixes

Improve tests and two bugfixes

7 years agoMerge pull request #6139 from zeha/dnssec-keysizes
Peter van Dijk [Thu, 4 Jan 2018 10:37:49 +0000 (11:37 +0100)]
Merge pull request #6139 from zeha/dnssec-keysizes

Forbid creating algo 5/8/10 keys with out-of-spec sizes

7 years agoUse algo constants where possible
Chris Hofstaedtler [Wed, 3 Jan 2018 23:35:57 +0000 (00:35 +0100)]
Use algo constants where possible

7 years agoForbid creating algo 5/8/10 keys with out-of-spec sizes
Chris Hofstaedtler [Wed, 3 Jan 2018 18:04:17 +0000 (19:04 +0100)]
Forbid creating algo 5/8/10 keys with out-of-spec sizes

7 years agoMerge pull request #6136 from zeha/apitests
Peter van Dijk [Wed, 3 Jan 2018 15:23:29 +0000 (16:23 +0100)]
Merge pull request #6136 from zeha/apitests

regression-tests.api: clean up runtests.py wrapper

7 years agorec: Don't validate signature for "glue" CNAME
Remi Gacogne [Wed, 3 Jan 2018 11:34:02 +0000 (12:34 +0100)]
rec: Don't validate signature for "glue" CNAME

Anything else than the initial CNAME can't be considered authoritative.

7 years agoregression-tests.api: clean up runtests.py wrapper
Chris Hofstaedtler [Wed, 3 Jan 2018 12:04:17 +0000 (13:04 +0100)]
regression-tests.api: clean up runtests.py wrapper

7 years agoMerge pull request #6131 from Habbie/curl-dep
Pieter Lexis [Wed, 3 Jan 2018 10:14:25 +0000 (11:14 +0100)]
Merge pull request #6131 from Habbie/curl-dep

rec: note curl dep when building from git

7 years agoMerge pull request #6132 from rgacogne/auth-no-lua
Peter van Dijk [Tue, 2 Jan 2018 14:47:40 +0000 (15:47 +0100)]
Merge pull request #6132 from rgacogne/auth-no-lua

auth: Add methods missing from AuthLua4 when Lua support is disabled

7 years agoMerge pull request #6129 from rgacogne/auth-init-crypto-before-chroot
Remi Gacogne [Tue, 2 Jan 2018 12:16:02 +0000 (13:16 +0100)]
Merge pull request #6129 from rgacogne/auth-init-crypto-before-chroot

auth: Init openssl and libsodium before chrooting in pdnsutil

7 years agorec: note curl dep when building from git
Peter van Dijk [Tue, 2 Jan 2018 11:26:35 +0000 (12:26 +0100)]
rec: note curl dep when building from git

7 years agoMerge pull request #6095 from rgacogne/rec-outgoing-buffer-off
Peter van Dijk [Tue, 2 Jan 2018 10:59:50 +0000 (11:59 +0100)]
Merge pull request #6095 from rgacogne/rec-outgoing-buffer-off

 rec: Pass the correct buffer size to arecvfrom()

7 years agoauth: Add methods missing from AuthLua4 when Lua support is disabled
Remi Gacogne [Tue, 2 Jan 2018 10:37:27 +0000 (11:37 +0100)]
auth: Add methods missing from AuthLua4 when Lua support is disabled

7 years agoUpdate copyright years to 2018
Pieter Lexis [Tue, 2 Jan 2018 08:57:59 +0000 (09:57 +0100)]
Update copyright years to 2018

Also update several years to match the data in pdns/version.cc

7 years agoauth: Init openssl and libsodium before chrooting in pdnsutil
Remi Gacogne [Mon, 1 Jan 2018 22:43:51 +0000 (23:43 +0100)]
auth: Init openssl and libsodium before chrooting in pdnsutil

7 years agopdns: Fix dependency tracking for backends
Aki Tuomi [Sat, 30 Dec 2017 18:42:21 +0000 (20:42 +0200)]
pdns: Fix dependency tracking for backends

Injects moduleobjects to dependency tracking. This fixes
issue where pdns_server did not recompile after backend
object(s) were changed.

7 years agoMerge pull request #6126 from gryphius/os-doc-fixes
Peter van Dijk [Sat, 30 Dec 2017 16:25:43 +0000 (17:25 +0100)]
Merge pull request #6126 from gryphius/os-doc-fixes

Os doc fixes

7 years agocompile options reference the Recursor instead of the Authoritative server
Oli Schacher [Sat, 30 Dec 2017 12:24:23 +0000 (13:24 +0100)]
compile options reference the Recursor instead of the Authoritative server

7 years agofix partial Partial
Oli Schacher [Sat, 30 Dec 2017 12:20:55 +0000 (13:20 +0100)]
fix partial Partial

7 years agoaccept seconds since epoch in RRSIG timestamps too (fixes #6120)
Stefan Bühler [Thu, 28 Dec 2017 22:20:48 +0000 (23:20 +0100)]
accept seconds since epoch in RRSIG timestamps too (fixes #6120)

7 years agofix xfrIP to reject invalid ips (fixes #6101)
Stefan Bühler [Thu, 28 Dec 2017 22:28:32 +0000 (23:28 +0100)]
fix xfrIP to reject invalid ips (fixes #6101)

- require exactly 3 dots
- forbid empty octets

7 years agotest-dnsrecords: add tests related to #6101
Stefan Bühler [Thu, 28 Dec 2017 22:10:01 +0000 (23:10 +0100)]
test-dnsrecords: add tests related to #6101

7 years agotest-dnsrecords: fix reversed logic for broken bad-values check
Stefan Bühler [Thu, 28 Dec 2017 22:09:38 +0000 (23:09 +0100)]
test-dnsrecords: fix reversed logic for broken bad-values check

7 years agotest-dnsrecords: warn that wire tests are not actually supported
Stefan Bühler [Thu, 28 Dec 2017 22:07:14 +0000 (23:07 +0100)]
test-dnsrecords: warn that wire tests are not actually supported

7 years agotest-dnsrecords: use enum class for case_type_enum_t, fix compile error testing wrong...
Stefan Bühler [Thu, 28 Dec 2017 22:05:27 +0000 (23:05 +0100)]
test-dnsrecords: use enum class for case_type_enum_t, fix compile error testing wrong tuple entry

7 years agotest-dnsrecords: test wire instead of zone for truncated AAAA wire value
Stefan Bühler [Thu, 28 Dec 2017 21:42:56 +0000 (22:42 +0100)]
test-dnsrecords: test wire instead of zone for truncated AAAA wire value

7 years agotest-dnsrecords: remove duplicate tests
Stefan Bühler [Thu, 28 Dec 2017 21:41:02 +0000 (22:41 +0100)]
test-dnsrecords: remove duplicate tests

7 years agotest-dnsrecords: handle TSIG like everything else
Stefan Bühler [Thu, 28 Dec 2017 21:38:42 +0000 (22:38 +0100)]
test-dnsrecords: handle TSIG like everything else

7 years agotest-dnsrecords: simplify CASE_L to CASE_S when inval == zoneval
Stefan Bühler [Thu, 28 Dec 2017 21:37:49 +0000 (22:37 +0100)]
test-dnsrecords: simplify CASE_L to CASE_S when inval == zoneval

7 years agounit tests: fix uninitialized pointer
Stefan Bühler [Thu, 28 Dec 2017 21:27:40 +0000 (22:27 +0100)]
unit tests: fix uninitialized pointer

7 years agoMerge pull request #6122 from zeha/ldapbackend-get
Remi Gacogne [Thu, 28 Dec 2017 20:04:05 +0000 (21:04 +0100)]
Merge pull request #6122 from zeha/ldapbackend-get

ldapbackend: fix listing zones incl. AXFR

7 years agoldapbackend: fix listing zones incl. AXFR
Chris Hofstaedtler [Thu, 28 Dec 2017 17:52:02 +0000 (18:52 +0100)]
ldapbackend: fix listing zones incl. AXFR

list() did not initialise m_qtype, but get() looks at it.

7 years agoMerge pull request #6108 from Habbie/remove-fake-ENTs
Pieter Lexis [Fri, 22 Dec 2017 11:30:32 +0000 (12:30 +0100)]
Merge pull request #6108 from Habbie/remove-fake-ENTs

auth: Remove fake NTs from testing zones

7 years agoMerge pull request #6107 from rgacogne/lua-auth-getrrs-uninitialized-index
Remi Gacogne [Thu, 21 Dec 2017 09:41:03 +0000 (10:41 +0100)]
Merge pull request #6107 from rgacogne/lua-auth-getrrs-uninitialized-index

auth: Fix uninitialized index in Lua's DNSPacket::getRRS() binding

7 years agoremove fake ENTs
Peter van Dijk [Mon, 18 Dec 2017 15:49:45 +0000 (16:49 +0100)]
remove fake ENTs

7 years agoadjust tinydns data for #6029
Peter van Dijk [Mon, 18 Dec 2017 20:07:46 +0000 (21:07 +0100)]
adjust tinydns data for #6029

7 years agoauth: Fix uninitialized index in Lua's DNSPacket::getRRS() binding
Remi Gacogne [Tue, 19 Dec 2017 09:01:16 +0000 (10:01 +0100)]
auth: Fix uninitialized index in Lua's DNSPacket::getRRS() binding

7 years agoMerge pull request #6106 from pieterlexis/issue-6105-dnsdist-opcode-docs
Remi Gacogne [Tue, 19 Dec 2017 08:56:26 +0000 (09:56 +0100)]
Merge pull request #6106 from pieterlexis/issue-6105-dnsdist-opcode-docs

dnsdist docs: Fix opcode links and sphinx warnings

7 years agodnsdist docs: Fix several warnings
Pieter Lexis [Tue, 19 Dec 2017 06:22:11 +0000 (07:22 +0100)]
dnsdist docs: Fix several warnings

7 years agodocs: Fix links for constants
Pieter Lexis [Tue, 19 Dec 2017 06:15:57 +0000 (07:15 +0100)]
docs: Fix links for constants

Closes #6105

7 years agoMerge pull request #6103 from Habbie/bounds-6089
bert hubert [Mon, 18 Dec 2017 18:17:16 +0000 (19:17 +0100)]
Merge pull request #6103 from Habbie/bounds-6089

auth: fix out of bounds exception in CAA processing, fixes #6089

7 years agoAdd TempFailureCacheTTLAction
Chris Hofstaedtler [Mon, 27 Nov 2017 18:31:20 +0000 (19:31 +0100)]
Add TempFailureCacheTTLAction

7 years agoauth: fix out of bounds exception in CAA processing, fixes #6089
Peter van Dijk [Mon, 18 Dec 2017 13:21:13 +0000 (14:21 +0100)]
auth: fix out of bounds exception in CAA processing, fixes #6089

7 years agoMerge pull request #6096 from alexjfisher/docs_database_slaves
Pieter Lexis [Mon, 18 Dec 2017 12:29:28 +0000 (13:29 +0100)]
Merge pull request #6096 from alexjfisher/docs_database_slaves

Docs: Add note about only needing ro db access

7 years agoMerge pull request #5390 from cmouse/lua
bert hubert [Mon, 18 Dec 2017 11:41:14 +0000 (12:41 +0100)]
Merge pull request #5390 from cmouse/lua

Remove old Lua code

7 years agofix check_stest_source
Aki Tuomi [Fri, 7 Jul 2017 15:47:29 +0000 (18:47 +0300)]
fix check_stest_source

7 years agofix recursor prequery scripts
Aki Tuomi [Fri, 7 Jul 2017 15:46:47 +0000 (18:46 +0300)]
fix recursor prequery scripts

7 years agotestrunner: Add unit test for lua-auth4.cc
Aki Tuomi [Sun, 11 Jun 2017 22:54:18 +0000 (01:54 +0300)]
testrunner: Add unit test for lua-auth4.cc

7 years agolua-auth4: updatePolicy should default to accept when not present
Aki Tuomi [Mon, 26 Jun 2017 11:01:06 +0000 (14:01 +0300)]
lua-auth4: updatePolicy should default to accept when not present

7 years agolua-auth: Remove unused sources
Aki Tuomi [Sun, 11 Jun 2017 21:37:08 +0000 (00:37 +0300)]
lua-auth: Remove unused sources

7 years agolua-auth4: Move prequery to new lua framework
Aki Tuomi [Sun, 11 Jun 2017 16:47:30 +0000 (19:47 +0300)]
lua-auth4: Move prequery to new lua framework

This changes how prequery gets called

7 years agolua-auth4: Add DNSPacket to Lua
Aki Tuomi [Sun, 11 Jun 2017 18:49:03 +0000 (21:49 +0300)]
lua-auth4: Add DNSPacket to Lua

7 years agolua-base4: Refactor to load from non-file sources
Aki Tuomi [Sun, 11 Jun 2017 21:02:32 +0000 (00:02 +0300)]
lua-base4: Refactor to load from non-file sources

7 years agoUse BaseLua4 with both auth and recursor
Aki Tuomi [Sun, 11 Jun 2017 21:08:55 +0000 (00:08 +0300)]
Use BaseLua4 with both auth and recursor

7 years agolua-base4: Add base lua for auth and recursor
Aki Tuomi [Sun, 11 Jun 2017 20:53:12 +0000 (23:53 +0300)]
lua-base4: Add base lua for auth and recursor

Allows code sharing between recursor and auth

7 years agoext/luawrapper: Add toString and eq to LuaContext
Aki Tuomi [Fri, 7 Jul 2017 15:36:26 +0000 (18:36 +0300)]
ext/luawrapper: Add toString and eq to LuaContext

https://github.com/ahupowerdns/luawrapper/pull/35

7 years agoMerge pull request #5947 from rgacogne/dnsdist-split-lua
Remi Gacogne [Mon, 18 Dec 2017 10:11:30 +0000 (11:11 +0100)]
Merge pull request #5947 from rgacogne/dnsdist-split-lua

dnsdist: Split the Lua files, remove deprecated functions

7 years agoMerge pull request #6042 from rgacogne/rec-duplicate-ns-ip
Remi Gacogne [Fri, 15 Dec 2017 20:13:45 +0000 (21:13 +0100)]
Merge pull request #6042 from rgacogne/rec-duplicate-ns-ip

rec: Don't cache merged answers from different sections in a single packet

7 years agoMerge pull request #6092 from rgacogne/rec-fix-nsec3-wildcard-labels
Remi Gacogne [Fri, 15 Dec 2017 16:46:18 +0000 (17:46 +0100)]
Merge pull request #6092 from rgacogne/rec-fix-nsec3-wildcard-labels

rec: Fix the computation of the closest encloser for positive answers

7 years agodnsdist: Split the Lua files, remove deprecated functions
Remi Gacogne [Fri, 10 Nov 2017 15:43:43 +0000 (16:43 +0100)]
dnsdist: Split the Lua files, remove deprecated functions

7 years agorec: Don't cached merged answers from different sections in a single packet
Remi Gacogne [Mon, 4 Dec 2017 09:38:43 +0000 (10:38 +0100)]
rec: Don't cached merged answers from different sections in a single packet

We incorrectly merged answers for the same qname and qtype coming from
a single packet but from different sections when storing them in the
cache. It resulted in duplicates for the IP addresses of some NS, for
example.

7 years agorec: Switch the exception thrown by `getDenial()` to a `PDNSException`
Remi Gacogne [Fri, 15 Dec 2017 13:30:46 +0000 (14:30 +0100)]
rec: Switch the exception thrown by `getDenial()` to a `PDNSException`

7 years agoMerge pull request #6037 from rgacogne/dnsdist-tags
Remi Gacogne [Fri, 15 Dec 2017 13:29:26 +0000 (14:29 +0100)]
Merge pull request #6037 from rgacogne/dnsdist-tags

dnsdist: Implement tag-based routing, add missing LuaAction and LuaResponseAction

7 years agoDocs: Add note about only needing ro db access
Alexander Fisher [Fri, 15 Dec 2017 13:07:42 +0000 (13:07 +0000)]
Docs: Add note about only needing ro db access