3
0
Commit Graph

138 Commits

Author SHA1 Message Date
Tomaž Jerman
cf769c2485 Move system/types/frame to a sepparate package 2022-09-19 16:22:37 +02:00
Denis Arh
2e222d1bfa Fix template searching, add query (by handle, type) 2022-09-02 08:49:40 +02:00
Tomaž Jerman
eb57c03e6c Port the old system reporter to the DAL pipeline 2022-09-01 16:55:20 +02:00
Denis Arh
f1908c9260 Cleaned up dal-connection REST def 2022-08-12 17:57:49 +02:00
Vivek Patel
db325fc125 Add route to list dal connections for privacy console
It will only list dal connections with minimal data.
2022-08-05 17:54:21 +05:30
Tomaž Jerman
9e1375e99a Refactor DAL capabilities into operations and properties 2022-08-02 12:57:22 +02:00
Denis Arh
54060f5ff8 Add user credentials management endpoints 2022-08-01 15:19:47 +02:00
Vivek Patel
fef77a7a47 Refactor rules endpoint
- Removes specific params
- Improves RuleSet.FilterResource to accept multiple resources
- Rework FindRules method in access-controller tpl
2022-07-27 22:43:07 +05:30
Vivek Patel
f160d391f5 Add filters to permissions for role route
It allows filtering for specific rules and also the rules which are applied to the resource, and not to a specific resource.

Introduces generic methods for RuleSet and FindRules method to access_control generation template.
2022-07-19 17:30:26 +05:30
Denis Arh
39046c52d0 Harden RBAC and refactor check tracking
- stricter rule checking when multiple roles have permissions on same
   resource
 - tracking (prev: evaluation) is refactored to stand out less than
   previous solution
 - performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Vivek Patel
d26ca37fe0 Refactor RBAC rule cloning route for role
It moves role permission cloning under /system/roles from /system/permissions, since cloning action copies all rules, and it can not be limited per-component and also shifted all respective service methods to role service and removed Rbac rule cloning methods from access-control template.
2022-07-10 15:47:26 +05:30
Tomaž Jerman
83ba7faa0f Add /permissions/evaluate endpoints to evaluate RBAC rules 2022-06-27 14:28:52 +02:00
Tomaž Jerman
acdda97daa Allow data privacy requests to store the payload 2022-06-14 20:35:42 +02:00
Vivek Patel
7cdf51adc4 Add data privacy request route and implementation
- Introduces new role for data-privacy-officer(Role allows user to manage data privacy requests)
- along with a new system resource for data privacy requests and its access control
- Routes as per access control to create data privacy request, list request and filter it based on their kind and status, update data privacy request status, and create/list comments on data privacy request
2022-06-14 13:17:44 +05:30
Tomaž Jerman
4517d9b06d Tweak dal connection location for easier FE work
Default it to the empty geolocation JSON.
2022-05-30 15:59:28 +02:00
Tomaž Jerman
ac07f133b5 Expand DAL REST API structure and exposed resources
* Cleanup DAL connection REST endpoints, remove primary connection
  endpoint.
* Make connection search endpoint return federation nodes and
  primary connection along user-defined DAL connections
* Expose DAL connection drivers
* Prepare DAL sensitivity level resource
2022-05-25 14:10:52 +02:00
Denis Arh
17406362dd Rename Connection to DalConnection 2022-05-24 14:29:22 +02:00
Tomaž Jerman
bda52ed992 Add endpoint for primary DAL connection 2022-05-20 15:37:33 +02:00
Tomaž Jerman
b85f16a368 Add slight structure rename, add supporting services
* Add system connection CRUD & service
* Simplify compose type definitions
2022-05-20 15:37:33 +02:00
Peter Grlica
476084a3bf Added profiler to apigw 2022-03-21 12:59:01 +01:00
Tomaž Jerman
9142c7b5a3 Add support for user export/import 2022-02-17 13:11:50 +01:00
Tomaž Jerman
4b113af9cc Allow content-type header to specify the charset 2022-01-18 21:50:19 +01:00
Peter Grlica
937ec1d584 Updated generated files 2022-01-18 21:50:18 +01:00
Denis Arh
60020f8510 Upgrade go-chi&co 2022-01-11 10:53:49 +01:00
Tomaž Jerman
907cb25ceb Add support for multipart/form-data request parsing 2021-12-21 09:11:51 +01:00
Denis Arh
92c0c3feb7 Add support for additional argument when invoking Corredor script 2021-12-17 12:59:24 +01:00
Vivek Patel
0564fe7190 Add support for role permission cloning
It clones all RBAC rules from one role to another, but also removes all existing rules from role.
2021-12-10 00:54:59 +05:30
Tomaž Jerman
4b6b52b3f6 Add back-end support for report scenarios 2021-11-10 16:39:21 +01:00
Peter Grlica
94d1e89ac3 Refactored messagebus out of service layer 2021-10-19 08:56:31 +02:00
Tomaž Jerman
fd07179be2 Add memberID param to roles list endpoint 2021-10-07 10:48:58 +02:00
Vivek Patel
a22083573c APIGw updates
- Fixes filter status update
- Updates search route API param for status
- Updates envoy marshaling for filter
- Fixes/Updated test for route and filter
2021-10-05 11:57:36 +05:30
Tomaž Jerman
5c1e57393e Rename report projection -> block 2021-10-01 10:08:58 +02:00
Vivek Patel
d2bff9e3fd Apigw tweaks
- Add system/apigw tests
- Removes permissions from APIGw filters from each level
2021-10-01 10:08:58 +02:00
Tomaž Jerman
c7975bbf40 Remove the insecure report run endpoint 2021-09-24 14:59:58 +02:00
Denis Arh
cfd95a6682 Rename resource translation routes 2021-09-22 11:26:14 +02:00
Tomaž Jerman
2a07d0435f Define base resource translation CRUD operations 2021-09-22 11:26:14 +02:00
Vivek Patel
9f74d5c074 Excludes deleted reminders from reminderList API
- Adds `includeDeleted` filter to include deleted reminders in reminderList API
2021-09-21 09:07:17 +05:30
Denis Arh
5d6945cec9 Add locale handling, translation dec/enc and serving 2021-08-23 19:10:21 +02:00
Tomaž Jerman
7626714050 Add a report description endpoint to query shape 2021-08-16 09:16:07 +02:00
Tomaž Jerman
4aa429362b Base reporting service definitions 2021-08-16 09:16:07 +02:00
Peter Grlica
d60823b8b5 Added async support 2021-08-16 08:12:52 +02:00
Peter Grlica
84598a8a52 Refactored functions to filters 2021-08-11 17:26:05 +02:00
Peter Grlica
ea9dd61559 Added JWT and oauth2 outbound authenticators
Proxy auth definitions for the UI
2021-08-11 17:25:12 +02:00
Peter Grlica
da9100287c Refactored services, rest and rdbms
Added tests

Added ac to routes and functions

Proxy processer and auth servicer

Added options and extensive logging

Fixed calls to rbac in service, added default http handler on gateway root
2021-08-11 17:25:10 +02:00
Peter Grlica
4e43020bf0 Added registry, updated handlers
Updated modules

Added function definition endpoint
2021-08-11 17:25:04 +02:00
Peter Grlica
9e498e9db6 Added route rest, actions, schema, types
Added function rest, actions, schema, types
2021-08-11 17:25:00 +02:00
Denis Arh
969581343c Implement split-credentials-check auth flow 2021-08-05 20:09:44 +02:00
Denis Arh
20e05280b3 System wide RBAC changes 2021-07-08 11:42:18 +02:00
Vivek Patel
1cb2e64d60 Adds system user API for removing active session and tokens 2021-07-06 21:13:03 +05:30
Tomaž Jerman
6bd82c3e9d Add endpoint to fetch available render drivers 2021-05-05 13:50:00 +02:00