3
0
Commit Graph

699 Commits

Author SHA1 Message Date
Denis Arh
89eefa5bc2 Use model/attribute terminology in CUE files 2022-08-01 19:01:19 +02:00
Denis Arh
353d6ad37d Unified CUE file names 2022-08-01 18:22:55 +02:00
Denis Arh
885e633ba2 Improve (cue) codegen performance 2022-08-01 18:17:31 +02:00
Denis Arh
54060f5ff8 Add user credentials management endpoints 2022-08-01 15:19:47 +02:00
Denis Arh
c9442260c5 Add support for revisions on compose records 2022-08-01 08:55:46 +02:00
Denis Arh
39bf9b75ea Deprecate ACTIONLOG_COMPOSE_RECORD_ENABLED 2022-08-01 08:55:46 +02:00
Denis Arh
04e93ede90 Cleanup compose module fields configs 2022-07-31 16:05:06 +02:00
Denis Arh
c710aa079d Reduce code & refactor Scan & Value fn 2022-07-30 16:11:06 +02:00
Denis Arh
a58eb1e052 Restructure config on compose module 2022-07-30 15:11:13 +02:00
Denis Arh
773fe7a602 Prevent error when wildcard resources are requested for RBAC trace 2022-07-28 15:01:16 +02:00
Denis Arh
98722f67eb Rename ModelFilter to ModelRef 2022-07-28 12:58:40 +02:00
Denis Arh
816e3ab041 Add cast2 package for simpler type-casting & value setting 2022-07-28 11:11:10 +02:00
Denis Arh
20cfc5b4e4 Cleanup record-value type, use Clone() 2022-07-28 11:11:10 +02:00
Denis Arh
8fa9f3b058 Remove record changing code from DAL (soft-delete) 2022-07-28 11:11:10 +02:00
Vivek Patel
fef77a7a47 Refactor rules endpoint
- Removes specific params
- Improves RuleSet.FilterResource to accept multiple resources
- Rework FindRules method in access-controller tpl
2022-07-27 22:43:07 +05:30
Tomaž Jerman
459589a69e Fix broken tests due to DAL related introduction 2022-07-27 16:53:05 +02:00
Tomaž Jerman
8e5ffab785 Add missing values to record Organize filter construction
Previous version defaulted filter's module and namespace references
if not provided; the new one does not which would cause all the
records to be used.
2022-07-27 16:53:04 +02:00
Tomaž Jerman
1ddb770f39 Fix record owner management logic and tests
* The service improperly checked record value errors causing
  invalid owner update attempts to pass.
* Fixed invalid tests due to RBAC internal logic corrections and
  missing initial record ownership.
2022-07-27 16:53:04 +02:00
Tomaž Jerman
76b99bd0ed Umbrella commit for generic commits
* Removed f.Check requirement from compose/dalutils.
* Added ref to original module when preparing target records for
  DAL value setter processing (helps with properly setting Ref field).
* Updated codegen & added missing imports.
2022-07-27 16:53:04 +02:00
Tomaž Jerman
cbc92dcc63 Fix module field update logic when records exist
The logic will need to be adjusted for DAL model issues, but the
current functionality is preserved with this.
2022-07-27 16:53:04 +02:00
Tomaž Jerman
b890f50098 Improve record value setter to utilize module when possible 2022-07-27 16:53:04 +02:00
Denis Arh
9a0e37a6d9 Fix multivalue attribute init and encoding 2022-07-27 11:24:23 +02:00
Vivek Patel
b41504dbe3 Improve KV related expr types, add r/w locking
Also extended filter for compose record values
2022-07-27 14:00:18 +05:30
Vivek Patel
fad8725a63 Fix sensitive level check for data privacy modules
A module have one or more module field with have a sensitivity level then it will consider as private module.
2022-07-26 09:30:59 +05:30
Tomaž Jerman
eb917eed6e Refactor data-privacy/sensitive-data to data-privacy/records 2022-07-25 16:56:15 +02:00
Denis Arh
5e8fae37af Fix store layer usage (must be store.<fn>(ctx, svc.store, ...) 2022-07-24 12:34:16 +02:00
Denis Arh
74d0dfd6de Add resource load&check on access-control 2022-07-24 11:50:56 +02:00
Denis Arh
805b160ec0 Add missing and standarize load<resource> functions 2022-07-24 11:49:30 +02:00
Thibaut
2b70f43560 call proc function after loading module fields 2022-07-22 10:40:00 +02:00
Denis Arh
fbdb284943 Fix chart translations 2022-07-21 11:11:40 +02:00
Vivek Patel
74191e32eb Remove ownership from data privacy module response 2022-07-19 18:09:34 +05:30
Vivek Patel
f160d391f5 Add filters to permissions for role route
It allows filtering for specific rules and also the rules which are applied to the resource, and not to a specific resource.

Introduces generic methods for RuleSet and FindRules method to access_control generation template.
2022-07-19 17:30:26 +05:30
Tomaž Jerman
1d5232fc75 Make DAL model management more consistent, deprecate most dalutils 2022-07-18 18:53:11 +02:00
Vivek Patel
56a7bfa821 Add route for listing sensitive modules
It will list out all the privacy related modules, that have one or more private fields.
2022-07-18 17:24:37 +05:30
Tomaž Jerman
88a75784ce Tweak rv sanitizer->value expression interaction
When record value expression returns null the value gets omitted.
Tweak value sanitizer logic for more consistency.
2022-07-18 10:01:22 +02:00
Jože Fortun
163f04bc6e Make sensitivity level property undefined by default 2022-07-15 15:28:48 +02:00
Denis Arh
cd865edb2b Fix RBAC tracing issue - always append auth roles
Whenever a RBAC check request is sent for a specific user
all user's roles are loaded. This fix appends authenticated
roles to that user as well.
2022-07-14 18:01:09 +02:00
Denis Arh
defdc41ec3 Improve RBAC resource handling 2022-07-14 11:07:10 +02:00
Denis Arh
39046c52d0 Harden RBAC and refactor check tracking
- stricter rule checking when multiple roles have permissions on same
   resource
 - tracking (prev: evaluation) is refactored to stand out less than
   previous solution
 - performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Denis Arh
bb23c84cf4 Support for dimension step translations on charts 2022-07-12 18:35:06 +02:00
Vivek Patel
d26ca37fe0 Refactor RBAC rule cloning route for role
It moves role permission cloning under /system/roles from /system/permissions, since cloning action copies all rules, and it can not be limited per-component and also shifted all respective service methods to role service and removed Rbac rule cloning methods from access-control template.
2022-07-10 15:47:26 +05:30
Tomaž Jerman
f56d61070d Review and add missing col sorting 2022-07-07 09:37:28 +02:00
Tomaž Jerman
5d8f00df64 Add content type assertion fallback for JSON file imports 2022-07-04 13:03:49 +02:00
Tomaž Jerman
8705cbdc0e Fix resource translations not removed when deleting field hint/description 2022-07-04 13:01:26 +02:00
Tomaž Jerman
afd292b982 Fix lapsus with module field res. tr. encoding/decoding pt. 2 2022-07-04 13:01:09 +02:00
Tomaž Jerman
480dc01796 Add missing page button config for create/update svc 2022-07-04 13:00:46 +02:00
Tomaž Jerman
ac0aca7a9c Fix lapsus with module field res. tr. encoding/decoding 2022-07-04 12:59:57 +02:00
Tomaž Jerman
2fddadc92a Refactor NS clone to reuse export/import core 2022-07-04 12:55:44 +02:00
Tomaž Jerman
9f7e87f30e Refactor NS import/export for above changes 2022-07-04 12:55:05 +02:00
Vivek Patel
e7a36e26c5 Add env options to enable/disable Compose record action log
It will enable/disable action log entry for compose record create, update or delete.
2022-07-04 12:53:39 +02:00