Denis Arh
5a4c4e1f06
Access control for user, role, app stats
2021-07-21 22:24:12 +02:00
Denis Arh
bed63c4f88
Add ability to create users via CLI with passwords from arg
2021-07-21 21:58:55 +02:00
Denis Arh
a8545caaaa
Make KV decoding (settings) more stable
2021-07-16 13:47:28 +02:00
Denis Arh
b459bd3558
Remove obsolete settings (ns switcher, one)
2021-07-16 13:19:08 +02:00
Denis Arh
ec6ecf1132
Fix user creation via wf
2021-07-15 20:36:57 +02:00
Denis Arh
89ae50dbae
Add RBAC functions for workflow for check&grant
2021-07-15 20:36:57 +02:00
Denis Arh
e4cd1f5bc5
Improve 'users add' command, add --role
2021-07-15 12:49:37 +02:00
Denis Arh
dca5757fe7
Add system user to context for system CLI ops
2021-07-15 12:31:51 +02:00
Peter Grlica
b6a4937739
Fixed a typo on generated template translation labels
2021-07-15 09:28:03 +02:00
Denis Arh
a7e2eec9fd
Improve expr types, add r/w locking
2021-07-14 10:49:32 +02:00
Denis Arh
f662d4e794
Add RBAC functions for workflow for check&grant
2021-07-14 10:44:09 +02:00
Denis Arh
92d2de8639
Add *.search RBAC ops check
2021-07-12 08:58:24 +02:00
Denis Arh
f630a3d9ef
Define *.search operations for all resources
2021-07-12 08:58:04 +02:00
Vivek Patel
03344782a9
Adds access control check for reminders
2021-07-09 02:00:13 +05:30
Denis Arh
20e05280b3
System wide RBAC changes
2021-07-08 11:42:18 +02:00
Denis Arh
b923953ca5
Removing superuser logic
2021-07-08 11:24:12 +02:00
Denis Arh
46f86dbd21
Role migration
2021-07-08 11:22:11 +02:00
Denis Arh
7941e7ba4a
Add general suport for new role types
2021-07-08 11:22:11 +02:00
Denis Arh
b3da377c2d
Support context roles support in rbac pkg
2021-07-08 11:22:11 +02:00
Denis Arh
6a6f74d4a6
Refactored resource/role logic
2021-07-08 11:22:11 +02:00
Vivek Patel
1cb2e64d60
Adds system user API for removing active session and tokens
2021-07-06 21:13:03 +05:30
Vivek Patel
f5532acf97
Fixes file upload for empty txt file and ico file
2021-07-02 18:04:08 +05:30
Denis Arh
80c76606ed
Fix boot-time race condition with settings notification
2021-06-30 07:32:04 +02:00
Tomaž Jerman
744bb70548
Add CSP to attachments to prevent XSS
2021-06-22 09:40:05 +02:00
Vivek Patel
13fc9d2684
Adds before/after suspend to system:user resource
2021-06-15 13:32:04 +05:30
Vivek Patel
d8a8f1f40b
Fixes type casting of IDs to string in UserFilter struct
2021-06-07 14:21:04 +05:30
Peter Grlica
a4b61c044e
Added integration and unit tests
2021-05-19 11:10:42 +02:00
Peter Grlica
bb1043181c
Added SAML service
2021-05-18 08:07:50 +02:00
Vivek Patel
25e4d11f92
Adds validation on setting impersonated user on auth clients
2021-05-14 17:06:55 +05:30
Denis Arh
70dedcaaba
Refactor & move websocket code under pkg
2021-05-13 14:08:54 +02:00
Vivek Patel
f1f53313b2
Adds unit test for sending message to user via websocket
2021-05-13 14:08:54 +02:00
Vivek Patel
7d58795123
Adds watcher at service level and sends reminders via websocket
2021-05-13 14:08:54 +02:00
Vivek Patel
1fd9bdfa7c
Extends SCIM implementation to support role membership management
...
- Updates request payload for patching group
- Updates tests
2021-05-11 17:01:03 +05:30
Tomaž Jerman
6bd82c3e9d
Add endpoint to fetch available render drivers
2021-05-05 13:50:00 +02:00
Denis Arh
b245726c9b
Implement client_credentials g.type with user imp.
2021-04-29 07:46:07 +02:00
Peter Grlica
d81c3339fe
Refactored messagebus handlers to consumers, removed readers, added
...
eventbus consumer
2021-04-26 08:54:03 +02:00
Peter Grlica
0bc9e9baa0
Added message queue rbac rules
2021-04-21 10:19:50 +02:00
Peter Grlica
8bba825706
Added rest api
2021-04-21 10:19:50 +02:00
Denis Arh
64c9b664df
Added messagebus, generated store files, workflow triggers
2021-04-21 10:19:50 +02:00
Denis Arh
419ebd8178
Fix check for auth client create permission
2021-04-11 13:04:28 +02:00
Denis Arh
7ac38269e8
Fix default permission for auth clients read op to DENY
2021-04-07 11:03:52 +02:00
Denis Arh
f9d000f203
Load roles for user on signup
...
In scenario where new user was promoted (1st user) to admin
and email confirmation is not required (due to disabled SMTP),
user's session did not get role memebership info until re-login.
2021-04-03 18:13:19 +02:00
Denis Arh
7383310d36
Better handling empty/uninit values
2021-04-03 13:06:01 +02:00
Tomaž Jerman
e5578d3d94
Add sprig to txt templates
2021-04-02 12:10:09 +02:00
Denis Arh
fdf916b7f9
Rework/simplify expr.Vars handling
2021-04-01 21:10:51 +02:00
Tomaž Jerman
fc331cc388
Tweaks
2021-03-31 19:32:22 +02:00
Denis Arh
0bcd2918c6
Fix template afunc handler definition
2021-03-31 08:26:24 +02:00
Denis Arh
e49f09405b
Rework render vars, allow (R)Vars as input arg
2021-03-30 16:18:34 +02:00
Tomaž Jerman
ed8fddd417
Tweak Envoy store -> yaml
...
* write to fs,
* temporary remove compact format,
* make complete namespace exports easier.
2021-03-30 09:29:08 +02:00
Alex Astrum
f9501893af
Fix support for min.io with Google Cloud Storage ( #152 )
...
Adds MINIO_BUCKET_SEP options to control the separator string
2021-03-28 09:25:55 +02:00
