3
0
Commit Graph

325 Commits

Author SHA1 Message Date
Vivek Patel
f160d391f5 Add filters to permissions for role route
It allows filtering for specific rules and also the rules which are applied to the resource, and not to a specific resource.

Introduces generic methods for RuleSet and FindRules method to access_control generation template.
2022-07-19 17:30:26 +05:30
Tomaž Jerman
149d75578a Fix/improve DAL integration tests 2022-07-18 18:53:11 +02:00
Denis Arh
39046c52d0 Harden RBAC and refactor check tracking
- stricter rule checking when multiple roles have permissions on same
   resource
 - tracking (prev: evaluation) is refactored to stand out less than
   previous solution
 - performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Denis Arh
d209ca3788 Additional integration tests for record reporter 2022-07-14 07:28:06 +02:00
Tomaž Jerman
2bddfd6af2 Add missing access control for NS dup 2022-07-04 12:56:26 +02:00
Denis Arh
bdd9318f93 Refactor and improve DAL implementation and init
Changes:
 - Boot initialization follows standard impl
 - Improved DAL connection management (adding, reloading, removing)
 - Cleaner and more detailed logging
 - Primary store connection is now reused when added to DAL
2022-07-01 18:13:54 +02:00
Denis Arh
ced4a26068 Fix broken es.NewStoreEncoder call 2022-06-28 16:07:30 +02:00
Tomaž Jerman
3b2710a210 Fix improper request kind type casting 2022-06-15 09:53:16 +02:00
Tomaž Jerman
557a573f04 Add base DAL tests 2022-06-14 20:35:42 +02:00
Vivek Patel
7cdf51adc4 Add data privacy request route and implementation
- Introduces new role for data-privacy-officer(Role allows user to manage data privacy requests)
- along with a new system resource for data privacy requests and its access control
- Routes as per access control to create data privacy request, list request and filter it based on their kind and status, update data privacy request status, and create/list comments on data privacy request
2022-06-14 13:17:44 +05:30
Tomaž Jerman
62e43f19d3 Add base DAL crud integration tests 2022-05-31 16:53:01 +02:00
Denis Arh
dd3d25a5ae Deprecate/remove AUTH_JWT_EXPIRY
JWT expiration is now controled via AUTH_OAUTH2_ACCESS_TOKEN_LIFETIME
2022-05-24 10:44:54 +02:00
Denis Arh
040ad02e75 Refactor and fix DAL tests
DAL tests are now moved to /tests/dal
2022-05-22 19:07:44 +02:00
Denis Arh
671a51f9f7 Refactor and renamed CRS implementation to DAL 2022-05-20 15:37:33 +02:00
Tomaž Jerman
1d2e928fae Connect external and internal CRS commponents 2022-05-20 15:37:33 +02:00
Tomaž Jerman
d04a08c82a Add missing module field name validation 2022-04-26 03:04:03 +02:00
Denis Arh
773d64636f Refactored store codegen, replace squirrel with goqu 2022-04-23 16:34:04 +02:00
Vivek Patel
195c2bb13e Fix mimeType detection for CSV file 2022-04-20 11:30:04 +02:00
Tomaž Jerman
6fd2288dfd Fix attachment management for all supported types
* Add missing expr.Bytes expr. type
* Fix attachment upload when []bytes used (missing type, improper
  size calculation)
* Fix attachment upload when ReadSeeker used (missing size calculation)
* Fix attachment upload when Reader used (missing logic, missing size
  calculation)
2022-04-19 14:32:04 +02:00
Tomaž Jerman
0792c0a17d Add missing limit arg. to workfow iterator handlers 2022-04-04 12:31:27 +02:00
Tomaž Jerman
f1215fe3da Fix sequence iterator looping condition and improper state 2022-03-24 12:02:34 +01:00
Vivek Patel
8015c39e96 Fixes record field validation translations 2022-03-22 19:29:59 +05:30
Peter Grlica
d72870a77d Fixed options parameter, more verbose info output, hit handling on panic 2022-03-21 13:06:50 +01:00
Tomaž Jerman
ab86689559 Fix report DB builder name conflicts 2022-03-02 12:40:06 +01:00
Denis Arh
ae34f35542 Proof that 2nd level iterator break works 2022-03-01 08:40:06 +01:00
Tomaž Jerman
8e679bf97c Improve namespace export
* Add RBAC rules
* add resource translations
* slight refactor
2022-02-25 16:48:25 +01:00
Denis Arh
6f19f00b29 Improve attachment uploading & constraints 2022-02-25 08:35:50 +01:00
Denis Arh
eb7cd34047 Skip whole TestMessageWrite 2022-02-23 19:22:27 +01:00
Denis Arh
7bde98697a Corteza discovery
- It provides mappings of corteza resources(Namespaces, Modules, Records, Users) along with values to corteza discovery indexer.
- It also save recordLogs for create, update, deletion of resources.
- Extend settings to hold discovery enabled/disabled flag
- Adds URL of compose resources for namespace and record and for module still pending, added todo with notes to code
2022-02-22 17:13:59 +05:30
Denis Arh
e13e429ca9 Add test cases for denied role member management 2022-02-21 12:08:09 +01:00
Vivek Patel
ef904e0cd3 Extend set/omit expr function
It updates 1st parameter of set expr function from merger type to interface, so It will accept constant values, also extend set/omit usage for ComposeRecordValues.
2022-02-18 00:22:21 +05:30
Denis Arh
b4f17a8df0 Skip test if messagebus consume test failes 2022-02-17 13:48:53 +01:00
Denis Arh
b478b37775 Add support for page config 2022-02-10 13:55:54 +01:00
Vivek Patel
760aec1c18 Update argument type of set expr function
It changes 3rd argument type os set expr function from TypedValue to interface, since GvalParser parses argument to native types before evaluating the expression.
2022-02-07 09:21:31 +01:00
Denis Arh
a4e5d2691a Fix invoker/runner mixup & move exec access-control check higher 2022-01-25 15:34:50 +01:00
Denis Arh
8988bf4f9c Fix failing TestAuthExternalSAMLSuccess test 2022-01-22 16:32:51 +01:00
Denis Arh
ef0588f365 Fix federation node-pairing tests 2022-01-22 16:32:51 +01:00
Denis Arh
6c3bef0750 Refactor token-issuer (ex-jwt) to be more robust and configurable 2022-01-21 15:31:10 +01:00
Tomaž Jerman
2c873d269f Add integration tests for namespace import/export 2022-01-18 21:50:19 +01:00
Denis Arh
29a135843f Minor fix of SAML tests, trim endlines in static files 2022-01-18 21:50:18 +01:00
Denis Arh
59ec77e204 Refactor JWT implementation 2022-01-18 21:50:18 +01:00
Denis Arh
3ffa0ef8be Fixing codebase after JWT lib switch 2022-01-11 15:35:05 +01:00
Denis Arh
72999ca692 Replacing dgrijalva/jwt-go with lestrrat-go/jwx 2022-01-11 10:56:17 +01:00
Denis Arh
60020f8510 Upgrade go-chi&co 2022-01-11 10:53:49 +01:00
Denis Arh
771a60abd7 Post dep-upgrade fixes 2022-01-11 10:53:49 +01:00
Denis Arh
ff7f642681 Refresh testing documentation 2021-12-20 07:52:48 +01:00
Tomaž Jerman
a45c914ecf Improve string support for reporter expressions 2021-12-10 12:59:20 +01:00
Vivek Patel
0564fe7190 Add support for role permission cloning
It clones all RBAC rules from one role to another, but also removes all existing rules from role.
2021-12-10 00:54:59 +05:30
Tomaž Jerman
59ef8da1ac Fix panicking report filter marshaling when invalid 2021-12-09 15:55:53 +01:00
Peter Grlica
eecf867090 Added jwt generate wf function 2021-12-08 10:21:50 +01:00