3
0
Commit Graph

337 Commits

Author SHA1 Message Date
Denis Arh
a58eb1e052 Restructure config on compose module 2022-07-30 15:11:13 +02:00
Denis Arh
f170760765 Fix RBAC rule filtering 2022-07-28 18:06:19 +02:00
Denis Arh
98722f67eb Rename ModelFilter to ModelRef 2022-07-28 12:58:40 +02:00
Vivek Patel
fef77a7a47 Refactor rules endpoint
- Removes specific params
- Improves RuleSet.FilterResource to accept multiple resources
- Rework FindRules method in access-controller tpl
2022-07-27 22:43:07 +05:30
Tomaž Jerman
459589a69e Fix broken tests due to DAL related introduction 2022-07-27 16:53:05 +02:00
Tomaž Jerman
a78c917226 Temporarily remove timestamp sorting params due to cursor issues 2022-07-27 16:53:04 +02:00
Tomaž Jerman
5391944f6e Fix permission clone tests failing due to endpoint refactor 2022-07-27 16:53:04 +02:00
Tomaž Jerman
1ddb770f39 Fix record owner management logic and tests
* The service improperly checked record value errors causing
  invalid owner update attempts to pass.
* Fixed invalid tests due to RBAC internal logic corrections and
  missing initial record ownership.
2022-07-27 16:53:04 +02:00
Tomaž Jerman
76b99bd0ed Umbrella commit for generic commits
* Removed f.Check requirement from compose/dalutils.
* Added ref to original module when preparing target records for
  DAL value setter processing (helps with properly setting Ref field).
* Updated codegen & added missing imports.
2022-07-27 16:53:04 +02:00
Tomaž Jerman
cce11cf19d Skip tests which can not yet be fixed due to envoy/reporter 2022-07-27 16:53:04 +02:00
Tomaž Jerman
fe27e4bf90 Temporarily remove envoy and reporter tests until they are reworked 2022-07-27 16:53:04 +02:00
Vivek Patel
b41504dbe3 Improve KV related expr types, add r/w locking
Also extended filter for compose record values
2022-07-27 14:00:18 +05:30
Vivek Patel
f160d391f5 Add filters to permissions for role route
It allows filtering for specific rules and also the rules which are applied to the resource, and not to a specific resource.

Introduces generic methods for RuleSet and FindRules method to access_control generation template.
2022-07-19 17:30:26 +05:30
Tomaž Jerman
149d75578a Fix/improve DAL integration tests 2022-07-18 18:53:11 +02:00
Denis Arh
39046c52d0 Harden RBAC and refactor check tracking
- stricter rule checking when multiple roles have permissions on same
   resource
 - tracking (prev: evaluation) is refactored to stand out less than
   previous solution
 - performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Denis Arh
d209ca3788 Additional integration tests for record reporter 2022-07-14 07:28:06 +02:00
Tomaž Jerman
2bddfd6af2 Add missing access control for NS dup 2022-07-04 12:56:26 +02:00
Denis Arh
bdd9318f93 Refactor and improve DAL implementation and init
Changes:
 - Boot initialization follows standard impl
 - Improved DAL connection management (adding, reloading, removing)
 - Cleaner and more detailed logging
 - Primary store connection is now reused when added to DAL
2022-07-01 18:13:54 +02:00
Denis Arh
ced4a26068 Fix broken es.NewStoreEncoder call 2022-06-28 16:07:30 +02:00
Tomaž Jerman
3b2710a210 Fix improper request kind type casting 2022-06-15 09:53:16 +02:00
Tomaž Jerman
557a573f04 Add base DAL tests 2022-06-14 20:35:42 +02:00
Vivek Patel
7cdf51adc4 Add data privacy request route and implementation
- Introduces new role for data-privacy-officer(Role allows user to manage data privacy requests)
- along with a new system resource for data privacy requests and its access control
- Routes as per access control to create data privacy request, list request and filter it based on their kind and status, update data privacy request status, and create/list comments on data privacy request
2022-06-14 13:17:44 +05:30
Tomaž Jerman
62e43f19d3 Add base DAL crud integration tests 2022-05-31 16:53:01 +02:00
Denis Arh
dd3d25a5ae Deprecate/remove AUTH_JWT_EXPIRY
JWT expiration is now controled via AUTH_OAUTH2_ACCESS_TOKEN_LIFETIME
2022-05-24 10:44:54 +02:00
Denis Arh
040ad02e75 Refactor and fix DAL tests
DAL tests are now moved to /tests/dal
2022-05-22 19:07:44 +02:00
Denis Arh
671a51f9f7 Refactor and renamed CRS implementation to DAL 2022-05-20 15:37:33 +02:00
Tomaž Jerman
1d2e928fae Connect external and internal CRS commponents 2022-05-20 15:37:33 +02:00
Tomaž Jerman
d04a08c82a Add missing module field name validation 2022-04-26 03:04:03 +02:00
Denis Arh
773d64636f Refactored store codegen, replace squirrel with goqu 2022-04-23 16:34:04 +02:00
Vivek Patel
195c2bb13e Fix mimeType detection for CSV file 2022-04-20 11:30:04 +02:00
Tomaž Jerman
6fd2288dfd Fix attachment management for all supported types
* Add missing expr.Bytes expr. type
* Fix attachment upload when []bytes used (missing type, improper
  size calculation)
* Fix attachment upload when ReadSeeker used (missing size calculation)
* Fix attachment upload when Reader used (missing logic, missing size
  calculation)
2022-04-19 14:32:04 +02:00
Tomaž Jerman
0792c0a17d Add missing limit arg. to workfow iterator handlers 2022-04-04 12:31:27 +02:00
Tomaž Jerman
f1215fe3da Fix sequence iterator looping condition and improper state 2022-03-24 12:02:34 +01:00
Vivek Patel
8015c39e96 Fixes record field validation translations 2022-03-22 19:29:59 +05:30
Peter Grlica
d72870a77d Fixed options parameter, more verbose info output, hit handling on panic 2022-03-21 13:06:50 +01:00
Tomaž Jerman
ab86689559 Fix report DB builder name conflicts 2022-03-02 12:40:06 +01:00
Denis Arh
ae34f35542 Proof that 2nd level iterator break works 2022-03-01 08:40:06 +01:00
Tomaž Jerman
8e679bf97c Improve namespace export
* Add RBAC rules
* add resource translations
* slight refactor
2022-02-25 16:48:25 +01:00
Denis Arh
6f19f00b29 Improve attachment uploading & constraints 2022-02-25 08:35:50 +01:00
Denis Arh
eb7cd34047 Skip whole TestMessageWrite 2022-02-23 19:22:27 +01:00
Denis Arh
7bde98697a Corteza discovery
- It provides mappings of corteza resources(Namespaces, Modules, Records, Users) along with values to corteza discovery indexer.
- It also save recordLogs for create, update, deletion of resources.
- Extend settings to hold discovery enabled/disabled flag
- Adds URL of compose resources for namespace and record and for module still pending, added todo with notes to code
2022-02-22 17:13:59 +05:30
Denis Arh
e13e429ca9 Add test cases for denied role member management 2022-02-21 12:08:09 +01:00
Vivek Patel
ef904e0cd3 Extend set/omit expr function
It updates 1st parameter of set expr function from merger type to interface, so It will accept constant values, also extend set/omit usage for ComposeRecordValues.
2022-02-18 00:22:21 +05:30
Denis Arh
b4f17a8df0 Skip test if messagebus consume test failes 2022-02-17 13:48:53 +01:00
Denis Arh
b478b37775 Add support for page config 2022-02-10 13:55:54 +01:00
Vivek Patel
760aec1c18 Update argument type of set expr function
It changes 3rd argument type os set expr function from TypedValue to interface, since GvalParser parses argument to native types before evaluating the expression.
2022-02-07 09:21:31 +01:00
Denis Arh
a4e5d2691a Fix invoker/runner mixup & move exec access-control check higher 2022-01-25 15:34:50 +01:00
Denis Arh
8988bf4f9c Fix failing TestAuthExternalSAMLSuccess test 2022-01-22 16:32:51 +01:00
Denis Arh
ef0588f365 Fix federation node-pairing tests 2022-01-22 16:32:51 +01:00
Denis Arh
6c3bef0750 Refactor token-issuer (ex-jwt) to be more robust and configurable 2022-01-21 15:31:10 +01:00