3
0
Commit Graph

1042 Commits

Author SHA1 Message Date
Denis Arh
c9442260c5 Add support for revisions on compose records 2022-08-01 08:55:46 +02:00
Denis Arh
39bf9b75ea Deprecate ACTIONLOG_COMPOSE_RECORD_ENABLED 2022-08-01 08:55:46 +02:00
Denis Arh
508dddd304 Implement generic package for revisions 2022-07-31 16:29:28 +02:00
Denis Arh
04e93ede90 Cleanup compose module fields configs 2022-07-31 16:05:06 +02:00
Denis Arh
0ae4311003 Add generic filter build for filter.Filter 2022-07-31 11:50:31 +02:00
Denis Arh
c710aa079d Reduce code & refactor Scan & Value fn 2022-07-30 16:11:06 +02:00
Denis Arh
a58eb1e052 Restructure config on compose module 2022-07-30 15:11:13 +02:00
Denis Arh
7d91b4eaaf Improve error message when database is misconfigured 2022-07-28 19:57:28 +02:00
Denis Arh
020b2c75b4 Moved pkg/decoder under fed/service/decoder 2022-07-28 19:44:20 +02:00
Denis Arh
a59f1dd361 Remove wrapping function from scheduler's watch() 2022-07-28 19:41:11 +02:00
Denis Arh
f170760765 Fix RBAC rule filtering 2022-07-28 18:06:19 +02:00
Denis Arh
05bdf6a1d4 Handle RBAC trace req on wildcard resource with contextual roles 2022-07-28 15:55:06 +02:00
Denis Arh
773fe7a602 Prevent error when wildcard resources are requested for RBAC trace 2022-07-28 15:01:16 +02:00
Denis Arh
34c767127f Fix DAL terminology (remove "record") 2022-07-28 14:16:01 +02:00
Denis Arh
55b4f4ece7 Remove wrapError utility func 2022-07-28 13:02:15 +02:00
Denis Arh
98722f67eb Rename ModelFilter to ModelRef 2022-07-28 12:58:40 +02:00
Denis Arh
816e3ab041 Add cast2 package for simpler type-casting & value setting 2022-07-28 11:11:10 +02:00
Denis Arh
f725624697 Move DAL iterator interface and add IteratorEncodeJSON 2022-07-28 11:04:56 +02:00
Vivek Patel
fef77a7a47 Refactor rules endpoint
- Removes specific params
- Improves RuleSet.FilterResource to accept multiple resources
- Rework FindRules method in access-controller tpl
2022-07-27 22:43:07 +05:30
Tomaž Jerman
76b99bd0ed Umbrella commit for generic commits
* Removed f.Check requirement from compose/dalutils.
* Added ref to original module when preparing target records for
  DAL value setter processing (helps with properly setting Ref field).
* Updated codegen & added missing imports.
2022-07-27 16:53:04 +02:00
Tomaž Jerman
978c538748 Make DAL Purge method not remove the primary store since its invalid 2022-07-27 16:53:04 +02:00
Tomaž Jerman
db4bdbe4ba Make DAL sensitivity level removal graceful
It does not error out if it does not exist like with other
resources.
This makes it more consistent and easier to work with in tests.
2022-07-27 16:53:04 +02:00
Vivek Patel
b41504dbe3 Improve KV related expr types, add r/w locking
Also extended filter for compose record values
2022-07-27 14:00:18 +05:30
Vivek Patel
fad8725a63 Fix sensitive level check for data privacy modules
A module have one or more module field with have a sensitivity level then it will consider as private module.
2022-07-26 09:30:59 +05:30
Denis Arh
74d0dfd6de Add resource load&check on access-control 2022-07-24 11:50:56 +02:00
Denis Arh
bab140a3f9 Skip contextual roles when doing RBAC trace on wildcard resource 2022-07-24 11:45:29 +02:00
Denis Arh
294d502786 Ensure default connection use finding DAL models 2022-07-21 08:37:52 +02:00
Denis Arh
c99095eba6 Print panic stacktrace directly if LOG_DEBUG is enabled 2022-07-21 08:37:31 +02:00
Vivek Patel
f160d391f5 Add filters to permissions for role route
It allows filtering for specific rules and also the rules which are applied to the resource, and not to a specific resource.

Introduces generic methods for RuleSet and FindRules method to access_control generation template.
2022-07-19 17:30:26 +05:30
Tomaž Jerman
1d5232fc75 Make DAL model management more consistent, deprecate most dalutils 2022-07-18 18:53:11 +02:00
Vivek Patel
56a7bfa821 Add route for listing sensitive modules
It will list out all the privacy related modules, that have one or more private fields.
2022-07-18 17:24:37 +05:30
Vivek Patel
07a8fdbbd5 Fix test notification cli command
Also, addresses issue with SMTP_* env vars value, which were ignored on server startup.
2022-07-18 17:12:12 +05:30
Tomaž Jerman
85bb86c5cd Refactor sensitivity levels to be consistent with connections 2022-07-15 11:02:14 +02:00
Denis Arh
87c65c2591 Fix RBAC tracing issue - handling wildcarded resources 2022-07-14 19:06:29 +02:00
Tomaž Jerman
f41b7872f4 Add content-type header for generated config.js 2022-07-14 13:52:14 +02:00
Denis Arh
d1d00d7771 Handle new auth options for signature algo & key 2022-07-14 11:09:26 +02:00
Denis Arh
4a27786f27 Cleanup token issuer (auth) code 2022-07-14 11:09:26 +02:00
Denis Arh
defdc41ec3 Improve RBAC resource handling 2022-07-14 11:07:10 +02:00
Denis Arh
af077b0edd Add slice.UInt64s, helper type
Type properly encodes slice of uint64s as JSON array of strings
2022-07-14 11:07:10 +02:00
Denis Arh
39046c52d0 Harden RBAC and refactor check tracking
- stricter rule checking when multiple roles have permissions on same
   resource
 - tracking (prev: evaluation) is refactored to stand out less than
   previous solution
 - performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Vivek Patel
0d9b63635e Add env config for webapp sentry DSN
Also, updates sentry DSN entry in config.js for webapp
2022-07-11 14:58:18 +05:30
Denis Arh
23e97f96e4 Remove all pre-2022.9.x migrations 2022-07-04 13:09:41 +02:00
Tomaž Jerman
5d8f00df64 Add content type assertion fallback for JSON file imports 2022-07-04 13:03:49 +02:00
Vivek Patel
c1412615b9 Fix pagination issue in migration of rbac resource rules 2022-07-04 13:03:39 +02:00
Vivek Patel
46e8f4d283 Fix migration of rbac resource rules 2022-07-04 13:02:03 +02:00
Peter Grlica
dada6e40da Removed unnecessary queue consumer property 2022-07-04 13:01:48 +02:00
Peter Grlica
495fac3845 Fix peer-closed connection error 2022-07-04 12:58:19 +02:00
Tomaž Jerman
3643b7d23b Fix resource.Ref eq. check to properly handle wildcard paths 2022-07-04 12:55:05 +02:00
Tomaž Jerman
9f7e87f30e Refactor NS import/export for above changes 2022-07-04 12:55:05 +02:00
Tomaž Jerman
a790c12064 Improve resource referencing
* Use Ref structs to allow for more context
* Assure constraints
2022-07-04 12:55:03 +02:00