Denis Arh
a547377f23
Fix nil-pointer panic in auth flow
2021-07-23 13:22:53 +02:00
Denis Arh
02b137d19e
Fix non-OIDC IdP skip due to invalid req. check
2021-07-23 06:41:08 +02:00
Denis Arh
205da42186
Move seeder package under pkg
2021-07-22 07:58:45 +02:00
Denis Arh
a05c8ce34f
Add support for base, fed and automation partial provisioning
2021-07-22 07:33:02 +02:00
Denis Arh
ef28b1a4af
Rename migration functions (6->9)
2021-07-22 07:32:57 +02:00
Denis Arh
55cb5f7a19
Fix set of provisioned RBAC rules
2021-07-21 22:52:40 +02:00
Denis Arh
67d7882b8e
Fix ClaimsToIdentify to return identity with all authenticated roles
2021-07-21 22:47:19 +02:00
Denis Arh
7cf6c18d81
Fix invalid error when user can not search namespaces
2021-07-21 22:46:18 +02:00
Denis Arh
5a4c4e1f06
Access control for user, role, app stats
2021-07-21 22:24:12 +02:00
Denis Arh
bed63c4f88
Add ability to create users via CLI with passwords from arg
2021-07-21 21:58:55 +02:00
Denis Arh
64ab501394
Remove RBAC reload on provisioning
2021-07-21 21:58:22 +02:00
Denis Arh
6ac257b482
Fix compose module field envoy marshalers
2021-07-21 21:56:35 +02:00
Denis Arh
9a29c6e1b2
Fix deferred workflow execution
...
This fix addresses execution of deferred workflows
and access control when setting run-as user.
Some additional standardisation on how we write
mutex/lock code.
2021-07-21 12:02:01 +02:00
Denis Arh
774354d663
Cleanup rec&mod response payloads (rbac flags)
2021-07-21 11:57:40 +02:00
Denis Arh
a8545caaaa
Make KV decoding (settings) more stable
2021-07-16 13:47:28 +02:00
Denis Arh
0cb917933b
Make OAuth2 runtime issues log as warnings (not errors)
2021-07-16 13:27:07 +02:00
Denis Arh
895dd61007
Rename migration files (6->9)
2021-07-16 13:21:24 +02:00
Denis Arh
b459bd3558
Remove obsolete settings (ns switcher, one)
2021-07-16 13:19:08 +02:00
Denis Arh
b46dad70f5
Fix typos in provision yaml files
2021-07-16 09:52:35 +02:00
Denis Arh
ec6ecf1132
Fix user creation via wf
2021-07-15 20:36:57 +02:00
Denis Arh
cfb757230e
Fix wf integration tests
2021-07-15 20:36:57 +02:00
Denis Arh
234d3795b9
Fix session type string variant
2021-07-15 20:36:57 +02:00
Denis Arh
89ae50dbae
Add RBAC functions for workflow for check&grant
2021-07-15 20:36:57 +02:00
Tomaž Jerman
3eafe6c39d
Update base access control provisioning for ComposeRecords
2021-07-15 14:29:30 +02:00
Tomaž Jerman
80e60d2f20
Add support for ComposeRecord RBAC rules
2021-07-15 14:29:30 +02:00
Tomaž Jerman
a2b964c53e
Remove AC from ComposeRecord import
2021-07-15 14:29:30 +02:00
Tomaž Jerman
579fe3f9eb
Allow missing ac when checking record RBAC
2021-07-15 14:29:30 +02:00
Denis Arh
e4cd1f5bc5
Improve 'users add' command, add --role
2021-07-15 12:49:37 +02:00
Denis Arh
dca5757fe7
Add system user to context for system CLI ops
2021-07-15 12:31:51 +02:00
Peter Grlica
b6a4937739
Fixed a typo on generated template translation labels
2021-07-15 09:28:03 +02:00
Denis Arh
5962d19cd0
Fix external auth provider management
2021-07-14 21:38:52 +02:00
Denis Arh
4ceab5803a
Add dev/debug friendly version of sync.RWMutex
2021-07-14 21:27:47 +02:00
Denis Arh
1750da6195
Fix wf session locking & canceling issue
2021-07-14 10:49:33 +02:00
Denis Arh
a7e2eec9fd
Improve expr types, add r/w locking
2021-07-14 10:49:32 +02:00
Denis Arh
d63f21c941
Workflow execution testing
2021-07-14 10:48:52 +02:00
Denis Arh
f662d4e794
Add RBAC functions for workflow for check&grant
2021-07-14 10:44:09 +02:00
Denis Arh
c5ec59e9d6
Add missing base RBAC provision
2021-07-14 10:44:09 +02:00
Tomaž Jerman
10e8b77d39
Deprecate record list filter query param
2021-07-14 09:56:49 +02:00
Tomaž Jerman
9dcea4fb79
Add missing seeder options codegen
2021-07-14 09:56:27 +02:00
Vivek Patel
568a9e6262
Adds fake data generation for compose records and users
...
- For users, It takes struct fields and generated value using third party pkg
- For records, It takes module fields type and options to generate the value
- Also adds cli integration for it
2021-07-13 21:27:44 +05:30
Denis Arh
0a38838298
Add *.search ops to provision configs
2021-07-12 08:58:24 +02:00
Denis Arh
0a241fab3e
Fix 2 small mistakes in envoy error messages
2021-07-12 08:58:24 +02:00
Denis Arh
92d2de8639
Add *.search RBAC ops check
2021-07-12 08:58:24 +02:00
Denis Arh
f630a3d9ef
Define *.search operations for all resources
2021-07-12 08:58:04 +02:00
Vivek Patel
03344782a9
Adds access control check for reminders
2021-07-09 02:00:13 +05:30
Denis Arh
3bf0f6f7e4
Add comments about new codegen
2021-07-08 15:55:05 +02:00
Denis Arh
2f2c055e9c
Merge branch '2021.9.x-feature-rbac2' into 2021.9.x
2021-07-08 11:53:35 +02:00
Denis Arh
20e05280b3
System wide RBAC changes
2021-07-08 11:42:18 +02:00
Denis Arh
a1de3374ad
RBAC related envoy changes
2021-07-08 11:24:15 +02:00
Denis Arh
b923953ca5
Removing superuser logic
2021-07-08 11:24:12 +02:00
