Tomaž Jerman
cbc92dcc63
Fix module field update logic when records exist
...
The logic will need to be adjusted for DAL model issues, but the
current functionality is preserved with this.
2022-07-27 16:53:04 +02:00
Tomaž Jerman
b890f50098
Improve record value setter to utilize module when possible
2022-07-27 16:53:04 +02:00
Denis Arh
9a0e37a6d9
Fix multivalue attribute init and encoding
2022-07-27 11:24:23 +02:00
Vivek Patel
b41504dbe3
Improve KV related expr types, add r/w locking
...
Also extended filter for compose record values
2022-07-27 14:00:18 +05:30
Vivek Patel
fad8725a63
Fix sensitive level check for data privacy modules
...
A module have one or more module field with have a sensitivity level then it will consider as private module.
2022-07-26 09:30:59 +05:30
Tomaž Jerman
eb917eed6e
Refactor data-privacy/sensitive-data to data-privacy/records
2022-07-25 16:56:15 +02:00
Denis Arh
5e8fae37af
Fix store layer usage (must be store.<fn>(ctx, svc.store, ...)
2022-07-24 12:34:16 +02:00
Denis Arh
74d0dfd6de
Add resource load&check on access-control
2022-07-24 11:50:56 +02:00
Denis Arh
805b160ec0
Add missing and standarize load<resource> functions
2022-07-24 11:49:30 +02:00
Thibaut
2b70f43560
call proc function after loading module fields
2022-07-22 10:40:00 +02:00
Denis Arh
fbdb284943
Fix chart translations
2022-07-21 11:11:40 +02:00
Vivek Patel
74191e32eb
Remove ownership from data privacy module response
2022-07-19 18:09:34 +05:30
Vivek Patel
f160d391f5
Add filters to permissions for role route
...
It allows filtering for specific rules and also the rules which are applied to the resource, and not to a specific resource.
Introduces generic methods for RuleSet and FindRules method to access_control generation template.
2022-07-19 17:30:26 +05:30
Tomaž Jerman
1d5232fc75
Make DAL model management more consistent, deprecate most dalutils
2022-07-18 18:53:11 +02:00
Vivek Patel
56a7bfa821
Add route for listing sensitive modules
...
It will list out all the privacy related modules, that have one or more private fields.
2022-07-18 17:24:37 +05:30
Tomaž Jerman
88a75784ce
Tweak rv sanitizer->value expression interaction
...
When record value expression returns null the value gets omitted.
Tweak value sanitizer logic for more consistency.
2022-07-18 10:01:22 +02:00
Jože Fortun
163f04bc6e
Make sensitivity level property undefined by default
2022-07-15 15:28:48 +02:00
Denis Arh
cd865edb2b
Fix RBAC tracing issue - always append auth roles
...
Whenever a RBAC check request is sent for a specific user
all user's roles are loaded. This fix appends authenticated
roles to that user as well.
2022-07-14 18:01:09 +02:00
Denis Arh
defdc41ec3
Improve RBAC resource handling
2022-07-14 11:07:10 +02:00
Denis Arh
39046c52d0
Harden RBAC and refactor check tracking
...
- stricter rule checking when multiple roles have permissions on same
resource
- tracking (prev: evaluation) is refactored to stand out less than
previous solution
- performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Denis Arh
bb23c84cf4
Support for dimension step translations on charts
2022-07-12 18:35:06 +02:00
Vivek Patel
d26ca37fe0
Refactor RBAC rule cloning route for role
...
It moves role permission cloning under /system/roles from /system/permissions, since cloning action copies all rules, and it can not be limited per-component and also shifted all respective service methods to role service and removed Rbac rule cloning methods from access-control template.
2022-07-10 15:47:26 +05:30
Tomaž Jerman
f56d61070d
Review and add missing col sorting
2022-07-07 09:37:28 +02:00
Tomaž Jerman
5d8f00df64
Add content type assertion fallback for JSON file imports
2022-07-04 13:03:49 +02:00
Tomaž Jerman
8705cbdc0e
Fix resource translations not removed when deleting field hint/description
2022-07-04 13:01:26 +02:00
Tomaž Jerman
afd292b982
Fix lapsus with module field res. tr. encoding/decoding pt. 2
2022-07-04 13:01:09 +02:00
Tomaž Jerman
480dc01796
Add missing page button config for create/update svc
2022-07-04 13:00:46 +02:00
Tomaž Jerman
ac0aca7a9c
Fix lapsus with module field res. tr. encoding/decoding
2022-07-04 12:59:57 +02:00
Tomaž Jerman
2fddadc92a
Refactor NS clone to reuse export/import core
2022-07-04 12:55:44 +02:00
Tomaž Jerman
9f7e87f30e
Refactor NS import/export for above changes
2022-07-04 12:55:05 +02:00
Vivek Patel
e7a36e26c5
Add env options to enable/disable Compose record action log
...
It will enable/disable action log entry for compose record create, update or delete.
2022-07-04 12:53:39 +02:00
Denis Arh
0954c0d638
Cleanup and fix compose module tests
2022-07-03 13:20:16 +02:00
Denis Arh
2b87ef2577
Fix record service tests
2022-07-03 12:19:48 +02:00
Denis Arh
bdd9318f93
Refactor and improve DAL implementation and init
...
Changes:
- Boot initialization follows standard impl
- Improved DAL connection management (adding, reloading, removing)
- Cleaner and more detailed logging
- Primary store connection is now reused when added to DAL
2022-07-01 18:13:54 +02:00
Denis Arh
61b91a8a6a
Cleaned up old store (record, rvalues) code, add missing tests
2022-06-28 19:01:44 +02:00
Denis Arh
9ce63f1210
Implement ownership access-control on record creation
...
Besides "owner.manage" on record resoure we now also have
"owned-record.create" on module.
2022-06-28 15:58:57 +02:00
Denis Arh
42f94b6395
Remove obsolete record service event-emiting control
2022-06-28 14:33:19 +02:00
Denis Arh
d5ab4c7eba
Improve record-service, return struct not interface
2022-06-28 14:31:50 +02:00
Denis Arh
14d3b7033d
Refactor RBAC evaluation processing
2022-06-28 12:53:51 +02:00
Tomaž Jerman
83ba7faa0f
Add /permissions/evaluate endpoints to evaluate RBAC rules
2022-06-27 14:28:52 +02:00
Peter Grlica
f7fc2f10dd
Removed required status on fields in record delete
...
Delete record workflow function removed required field status on
namespace and module.
2022-06-22 10:13:52 +02:00
Jože Fortun
c535e3a91e
Add wrap field to PageBlockStyle struct
2022-06-17 14:20:25 +02:00
Tomaž Jerman
cfed35d639
Prevent connection change for existing modules
2022-06-14 20:35:42 +02:00
Tomaž Jerman
71b3aacae5
Fix edgecase where empty sets would return
2022-06-14 20:35:42 +02:00
Tomaž Jerman
91552f607f
Fix inconsistent naming for private data endpoint
2022-06-14 20:35:42 +02:00
Tomaž Jerman
2afd806c2e
Allow sensitive data collection to filter by connectionID
2022-06-14 20:35:42 +02:00
Tomaž Jerman
2497dead2e
Temporarily use the field's private flag for sensitive data collection
2022-06-14 20:35:42 +02:00
Tomaž Jerman
44f41fb10b
Make some module model REST params optional
2022-06-14 20:35:42 +02:00
Tomaž Jerman
c5482777aa
Fix improper record filter construction
2022-06-14 20:35:42 +02:00
Tomaž Jerman
ffb8dc1473
Add missing JSON tag params
2022-06-14 20:35:42 +02:00