3
0
Commit Graph

135 Commits

Author SHA1 Message Date
Vivek Patel
f160d391f5 Add filters to permissions for role route
It allows filtering for specific rules and also the rules which are applied to the resource, and not to a specific resource.

Introduces generic methods for RuleSet and FindRules method to access_control generation template.
2022-07-19 17:30:26 +05:30
Denis Arh
cd865edb2b Fix RBAC tracing issue - always append auth roles
Whenever a RBAC check request is sent for a specific user
all user's roles are loaded. This fix appends authenticated
roles to that user as well.
2022-07-14 18:01:09 +02:00
Denis Arh
defdc41ec3 Improve RBAC resource handling 2022-07-14 11:07:10 +02:00
Denis Arh
39046c52d0 Harden RBAC and refactor check tracking
- stricter rule checking when multiple roles have permissions on same
   resource
 - tracking (prev: evaluation) is refactored to stand out less than
   previous solution
 - performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Vivek Patel
d26ca37fe0 Refactor RBAC rule cloning route for role
It moves role permission cloning under /system/roles from /system/permissions, since cloning action copies all rules, and it can not be limited per-component and also shifted all respective service methods to role service and removed Rbac rule cloning methods from access-control template.
2022-07-10 15:47:26 +05:30
Denis Arh
188b7f3b44 Fix store codegen template 2022-07-03 12:55:31 +02:00
Denis Arh
bdd9318f93 Refactor and improve DAL implementation and init
Changes:
 - Boot initialization follows standard impl
 - Improved DAL connection management (adding, reloading, removing)
 - Cleaner and more detailed logging
 - Primary store connection is now reused when added to DAL
2022-07-01 18:13:54 +02:00
Denis Arh
14d3b7033d Refactor RBAC evaluation processing 2022-06-28 12:53:51 +02:00
Tomaž Jerman
83ba7faa0f Add /permissions/evaluate endpoints to evaluate RBAC rules 2022-06-27 14:28:52 +02:00
Tomaž Jerman
033d2572dd Refactor core compose, system services with new DAL changes
* Define utility packages to work with DAL structs
* Cleanup code
2022-06-14 12:08:16 +02:00
Vivek Patel
86431fe82f Add rest endpoints for chart translations
It allows saving/updating yAxis label and metric label translations
2022-06-14 13:17:44 +05:30
Vivek Patel
7cdf51adc4 Add data privacy request route and implementation
- Introduces new role for data-privacy-officer(Role allows user to manage data privacy requests)
- along with a new system resource for data privacy requests and its access control
- Routes as per access control to create data privacy request, list request and filter it based on their kind and status, update data privacy request status, and create/list comments on data privacy request
2022-06-14 13:17:44 +05:30
Tomaž Jerman
ac07f133b5 Expand DAL REST API structure and exposed resources
* Cleanup DAL connection REST endpoints, remove primary connection
  endpoint.
* Make connection search endpoint return federation nodes and
  primary connection along user-defined DAL connections
* Expose DAL connection drivers
* Prepare DAL sensitivity level resource
2022-05-25 14:10:52 +02:00
Denis Arh
47cdee0125 Refactor store migration/upgrade proc 2022-04-26 03:03:47 +02:00
Denis Arh
3e3c4560fb Pass *Store to custom RDBMS filters for more flexibility 2022-04-24 09:18:35 +02:00
Denis Arh
a5753645f5 Nicer warning for docs gen makefile task 2022-04-24 09:16:35 +02:00
Denis Arh
5fe1e63f22 Fix cue resource definitions 2022-04-24 07:36:17 +02:00
Vivek Patel
faa1dc57b2 Fix codegen for store 2022-04-23 16:46:34 +02:00
Denis Arh
dc325b97e1 Fix paging on store search 2022-04-23 16:34:06 +02:00
Denis Arh
773d64636f Refactored store codegen, replace squirrel with goqu 2022-04-23 16:34:04 +02:00
Tomaž Jerman
9a93473cea Fix resource translation reloading 2022-03-30 14:24:16 +02:00
Vivek Patel
3c5132e642 Fix transaction inside resource translation upsert
Fixes slow module update with many resource translation
2022-03-29 18:24:17 +05:30
Denis Arh
745a501019 Add rbac docs generators 2022-03-18 15:54:37 +01:00
Denis Arh
4437627eb3 Reimplement doc-generator for options 2022-03-18 09:42:45 +01:00
Denis Arh
9b5586719e Split & move codegen tasks to codegen/Makefile 2022-03-18 08:41:07 +01:00
Tomaž Jerman
631811929e Fix resource translation codegen and empty string handling 2022-03-03 11:36:08 +01:00
Denis Arh
7fd719364e Fix options defaults (Defaults() fn must be called before fill()) 2022-02-16 20:34:37 +01:00
Denis Arh
d27955daf3 Add missing locations to cue.fmt make task and re-run formatting 2022-02-09 10:09:47 +01:00
Denis Arh
3212f00325 Apply formatting to all cue files 2022-02-08 09:13:56 +01:00
Denis Arh
80d9b466ac Add support for .env.example generator 2022-02-08 09:13:56 +01:00
Denis Arh
d09b037e84 Improve codegen templating tool 2022-02-08 09:13:56 +01:00
Denis Arh
d103d60a3d Refactor option definitions 2022-02-08 09:13:56 +01:00
Denis Arh
3bddce4d35 Migrate codegen for locale to CUE 2022-02-03 13:41:17 +01:00
Denis Arh
5ba8fbb6f4 Disable options docs codegen 2022-02-01 17:55:46 +01:00
Denis Arh
a035e6106f Ported options codegen to cue 2022-01-29 12:18:00 +01:00
Denis Arh
74d6eabf94 Various template & def fixes 2022-01-26 16:27:38 +01:00
Denis Arh
1284371bb3 Add cue tooling & codegen to makefile 2022-01-26 16:27:36 +01:00
Denis Arh
52209c476b Port all v3 codegen to cue-based codegen 2022-01-26 16:25:54 +01:00
Denis Arh
a437913f85 Migrate codegen for envoy to CUE 2022-01-26 16:25:53 +01:00
Denis Arh
3568d0841e Migrate codegen for locale to CUE 2022-01-26 16:25:53 +01:00
Denis Arh
c19ee84f5d Base CUE, def, schemas 2022-01-26 16:25:53 +01:00
Denis Arh
3f30105d67 Remove obsolete codegen files 2020-08-24 15:38:42 +02:00
Denis Arh
709a3a946a Improve auditlog meta handling (support for omitting empty values) 2020-05-31 10:38:27 +02:00
Denis Arh
ef47a0d612 Small codegen bits changes, add adoc template for events 2020-05-27 11:06:10 +02:00
Denis Arh
4d751c1875 Improve actionlog err/message placeholder replacement 2020-05-26 19:02:32 +02:00
Denis Arh
a0c732f6ff Add check if lambda action can be called 2020-05-26 15:48:05 +02:00
Denis Arh
a7bc1e4d37 Cleanup actions, errors, implement actionlog for stats 2020-05-26 11:46:55 +02:00
Denis Arh
e8b81396ef Support for HTTP errors, add sink impl. 2020-05-26 08:07:03 +02:00
Denis Arh
5f8fb8a294 Implementation actions & errors for access control, auth, role & user 2020-05-26 08:00:53 +02:00
Denis Arh
086411722e Action log implementation 2020-05-22 07:16:14 +02:00