Denis Arh
39046c52d0
Harden RBAC and refactor check tracking
...
- stricter rule checking when multiple roles have permissions on same
resource
- tracking (prev: evaluation) is refactored to stand out less than
previous solution
- performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Denis Arh
d209ca3788
Additional integration tests for record reporter
2022-07-14 07:28:06 +02:00
Tomaž Jerman
2bddfd6af2
Add missing access control for NS dup
2022-07-04 12:56:26 +02:00
Denis Arh
bdd9318f93
Refactor and improve DAL implementation and init
...
Changes:
- Boot initialization follows standard impl
- Improved DAL connection management (adding, reloading, removing)
- Cleaner and more detailed logging
- Primary store connection is now reused when added to DAL
2022-07-01 18:13:54 +02:00
Denis Arh
ced4a26068
Fix broken es.NewStoreEncoder call
2022-06-28 16:07:30 +02:00
Tomaž Jerman
3b2710a210
Fix improper request kind type casting
2022-06-15 09:53:16 +02:00
Tomaž Jerman
557a573f04
Add base DAL tests
2022-06-14 20:35:42 +02:00
Vivek Patel
7cdf51adc4
Add data privacy request route and implementation
...
- Introduces new role for data-privacy-officer(Role allows user to manage data privacy requests)
- along with a new system resource for data privacy requests and its access control
- Routes as per access control to create data privacy request, list request and filter it based on their kind and status, update data privacy request status, and create/list comments on data privacy request
2022-06-14 13:17:44 +05:30
Tomaž Jerman
62e43f19d3
Add base DAL crud integration tests
2022-05-31 16:53:01 +02:00
Denis Arh
dd3d25a5ae
Deprecate/remove AUTH_JWT_EXPIRY
...
JWT expiration is now controled via AUTH_OAUTH2_ACCESS_TOKEN_LIFETIME
2022-05-24 10:44:54 +02:00
Denis Arh
040ad02e75
Refactor and fix DAL tests
...
DAL tests are now moved to /tests/dal
2022-05-22 19:07:44 +02:00
Denis Arh
671a51f9f7
Refactor and renamed CRS implementation to DAL
2022-05-20 15:37:33 +02:00
Tomaž Jerman
1d2e928fae
Connect external and internal CRS commponents
2022-05-20 15:37:33 +02:00
Tomaž Jerman
d04a08c82a
Add missing module field name validation
2022-04-26 03:04:03 +02:00
Denis Arh
773d64636f
Refactored store codegen, replace squirrel with goqu
2022-04-23 16:34:04 +02:00
Vivek Patel
195c2bb13e
Fix mimeType detection for CSV file
2022-04-20 11:30:04 +02:00
Tomaž Jerman
6fd2288dfd
Fix attachment management for all supported types
...
* Add missing expr.Bytes expr. type
* Fix attachment upload when []bytes used (missing type, improper
size calculation)
* Fix attachment upload when ReadSeeker used (missing size calculation)
* Fix attachment upload when Reader used (missing logic, missing size
calculation)
2022-04-19 14:32:04 +02:00
Tomaž Jerman
0792c0a17d
Add missing limit arg. to workfow iterator handlers
2022-04-04 12:31:27 +02:00
Tomaž Jerman
f1215fe3da
Fix sequence iterator looping condition and improper state
2022-03-24 12:02:34 +01:00
Vivek Patel
8015c39e96
Fixes record field validation translations
2022-03-22 19:29:59 +05:30
Peter Grlica
d72870a77d
Fixed options parameter, more verbose info output, hit handling on panic
2022-03-21 13:06:50 +01:00
Tomaž Jerman
ab86689559
Fix report DB builder name conflicts
2022-03-02 12:40:06 +01:00
Denis Arh
ae34f35542
Proof that 2nd level iterator break works
2022-03-01 08:40:06 +01:00
Tomaž Jerman
8e679bf97c
Improve namespace export
...
* Add RBAC rules
* add resource translations
* slight refactor
2022-02-25 16:48:25 +01:00
Denis Arh
6f19f00b29
Improve attachment uploading & constraints
2022-02-25 08:35:50 +01:00
Denis Arh
eb7cd34047
Skip whole TestMessageWrite
2022-02-23 19:22:27 +01:00
Denis Arh
7bde98697a
Corteza discovery
...
- It provides mappings of corteza resources(Namespaces, Modules, Records, Users) along with values to corteza discovery indexer.
- It also save recordLogs for create, update, deletion of resources.
- Extend settings to hold discovery enabled/disabled flag
- Adds URL of compose resources for namespace and record and for module still pending, added todo with notes to code
2022-02-22 17:13:59 +05:30
Denis Arh
e13e429ca9
Add test cases for denied role member management
2022-02-21 12:08:09 +01:00
Vivek Patel
ef904e0cd3
Extend set/omit expr function
...
It updates 1st parameter of set expr function from merger type to interface, so It will accept constant values, also extend set/omit usage for ComposeRecordValues.
2022-02-18 00:22:21 +05:30
Denis Arh
b4f17a8df0
Skip test if messagebus consume test failes
2022-02-17 13:48:53 +01:00
Denis Arh
b478b37775
Add support for page config
2022-02-10 13:55:54 +01:00
Vivek Patel
760aec1c18
Update argument type of set expr function
...
It changes 3rd argument type os set expr function from TypedValue to interface, since GvalParser parses argument to native types before evaluating the expression.
2022-02-07 09:21:31 +01:00
Denis Arh
a4e5d2691a
Fix invoker/runner mixup & move exec access-control check higher
2022-01-25 15:34:50 +01:00
Denis Arh
8988bf4f9c
Fix failing TestAuthExternalSAMLSuccess test
2022-01-22 16:32:51 +01:00
Denis Arh
ef0588f365
Fix federation node-pairing tests
2022-01-22 16:32:51 +01:00
Denis Arh
6c3bef0750
Refactor token-issuer (ex-jwt) to be more robust and configurable
2022-01-21 15:31:10 +01:00
Tomaž Jerman
2c873d269f
Add integration tests for namespace import/export
2022-01-18 21:50:19 +01:00
Denis Arh
29a135843f
Minor fix of SAML tests, trim endlines in static files
2022-01-18 21:50:18 +01:00
Denis Arh
59ec77e204
Refactor JWT implementation
2022-01-18 21:50:18 +01:00
Denis Arh
3ffa0ef8be
Fixing codebase after JWT lib switch
2022-01-11 15:35:05 +01:00
Denis Arh
72999ca692
Replacing dgrijalva/jwt-go with lestrrat-go/jwx
2022-01-11 10:56:17 +01:00
Denis Arh
60020f8510
Upgrade go-chi&co
2022-01-11 10:53:49 +01:00
Denis Arh
771a60abd7
Post dep-upgrade fixes
2022-01-11 10:53:49 +01:00
Denis Arh
ff7f642681
Refresh testing documentation
2021-12-20 07:52:48 +01:00
Tomaž Jerman
a45c914ecf
Improve string support for reporter expressions
2021-12-10 12:59:20 +01:00
Vivek Patel
0564fe7190
Add support for role permission cloning
...
It clones all RBAC rules from one role to another, but also removes all existing rules from role.
2021-12-10 00:54:59 +05:30
Tomaž Jerman
59ef8da1ac
Fix panicking report filter marshaling when invalid
2021-12-09 15:55:53 +01:00
Peter Grlica
eecf867090
Added jwt generate wf function
2021-12-08 10:21:50 +01:00
Denis Arh
70352a0be4
Remove unwrapping of workflow errors
...
It removes important details about step ID from the error
2021-12-02 10:48:59 +01:00
Denis Arh
b9f96d920a
Support attachment management in workflow
2021-12-02 10:48:59 +01:00