Denis Arh
|
e89160be1e
|
Raise def. value for request rate limit to 60
|
2021-10-01 10:08:58 +02:00 |
|
Denis Arh
|
dd8921d392
|
Add ability to disable CSRF
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
304f1b11ec
|
Add missing record.value.read rule for compose module fields
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
a122d75b8f
|
Improve RBAC rule migration logic
* Add missing federation rule edgecases
* Properly construct resource paths using parent resources
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
9929886372
|
Remove api gw filter expression from error messages
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
7ea20c489b
|
Add missing res. tr. identification logic
|
2021-10-01 10:08:58 +02:00 |
|
Denis Arh
|
cbb486ef5a
|
Add app, auth client, user, role search privileges to authenticated user
|
2021-10-01 10:08:58 +02:00 |
|
Denis Arh
|
90a2f2301d
|
Add reporter to the list of apps for 'make webapp'
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
9907a74a93
|
Fix improper ctx role resource list importing
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
5155310ca0
|
Slight record resource RBAC tweaks
* Add canRead to record response
* Use existing record when evaluating record update ctx roles
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
951f6e9e17
|
Add context role support for workflows
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
5c1e57393e
|
Rename report projection -> block
|
2021-10-01 10:08:58 +02:00 |
|
Vivek Patel
|
d2bff9e3fd
|
Apigw tweaks
- Add system/apigw tests
- Removes permissions from APIGw filters from each level
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
74d7c6c7a2
|
Fix RecordList field selection export
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
2936fda461
|
Rework API GW js func handling
Remove base64 encode/decede as it was not consistent.
Using built-in JSON marshling was the better solution.
|
2021-10-01 10:08:58 +02:00 |
|
Vivek Patel
|
b342ec91d8
|
Fixes token generation in integration test
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
c2136c54c6
|
Remove frame column caster from YAML def
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
edcac041bc
|
Add missing rbac envoy resources
|
2021-10-01 10:08:58 +02:00 |
|
Tomaž Jerman
|
1251bac373
|
Fix locale loading race conditions
|
2021-10-01 10:08:58 +02:00 |
|
Jože Fortun
|
9ee3ab0bb8
|
Update themes for auth screens
|
2021-09-27 17:02:58 +02:00 |
|
Tomaž Jerman
|
6ceadf40fc
|
Setup the API GW testing env
|
2021-09-27 15:50:18 +02:00 |
|
Tomaž Jerman
|
52e0e838e9
|
Prevent API GW filters from overwriting the same registry struct
|
2021-09-27 14:11:40 +02:00 |
|
Tomaž Jerman
|
f9398a6ebf
|
Ignore workflow issues when working with triggers
|
2021-09-27 12:47:51 +02:00 |
|
Tomaž Jerman
|
e7fb1e3e07
|
Tweak typed value Array casting; add missing selected prop
|
2021-09-27 10:42:35 +02:00 |
|
Tomaž Jerman
|
2511476f4c
|
Fix improper module field resource translation refs
|
2021-09-25 09:36:03 +02:00 |
|
Vivek Patel
|
68af7a4fb0
|
Skips removal of accessTokens when we update roleMembers
|
2021-09-24 23:54:37 +05:30 |
|
Denis Arh
|
50e5d1a9f8
|
Remove res-tr table truncate, fix field & expr labels migration
|
2021-09-24 19:06:49 +02:00 |
|
Denis Arh
|
64bfb65d23
|
Add "locale.update" make task
|
2021-09-24 18:24:03 +02:00 |
|
Denis Arh
|
3c43bbe5ac
|
Update corteza-locale dep
|
2021-09-24 18:24:03 +02:00 |
|
Tomaž Jerman
|
57c0c319aa
|
Post testing tweaks
* Auth screens
|
2021-09-24 18:17:13 +02:00 |
|
Vivek Patel
|
a9c762aacc
|
Fix integration tests
- Extends helper for integration test with token generation
|
2021-09-24 19:24:00 +05:30 |
|
Katrin Yordanova
|
ac587db589
|
Fix styles for auth screens
|
2021-09-24 16:13:18 +03:00 |
|
Tomaž Jerman
|
c7975bbf40
|
Remove the insecure report run endpoint
|
2021-09-24 14:59:58 +02:00 |
|
Tomaž Jerman
|
9a1c91675b
|
Assure propper paging cursor value casting for reporting
|
2021-09-24 14:22:45 +02:00 |
|
Tomaž Jerman
|
11c225c6f4
|
Post testing reporter tweaks
* add support for existence checking (IS (NOT) NULL)
* cover edgecase where either join dimension is empty
* add support for negation operator
|
2021-09-24 13:17:28 +02:00 |
|
Tomaž Jerman
|
37d1cb77d2
|
Fix envoy dep. resolution flakines
|
2021-09-23 16:47:18 +02:00 |
|
Tomaž Jerman
|
000664ef32
|
Merge branch '2021.9.x-feature-ns-dup' into 2021.9.x
|
2021-09-23 13:05:14 +02:00 |
|
Tomaž Jerman
|
c4984c44f4
|
Post testing tweaks
* Defer resource ID dereferencing to store encoder layer
* Allow pageID when exporting to YAML for correct relations
|
2021-09-23 13:05:09 +02:00 |
|
Tomaž Jerman
|
f7922d9736
|
Add support for namespace clone, export, import
|
2021-09-23 13:05:08 +02:00 |
|
Tomaž Jerman
|
d90c11153b
|
Additional envoy resource manipulation utilities
|
2021-09-23 13:05:08 +02:00 |
|
Denis Arh
|
806dbfaa01
|
Implement invoker and runner wf scope vars
|
2021-09-23 07:37:49 +02:00 |
|
Denis Arh
|
3515cf2a06
|
Fix trigger loading on workflow execution
Triggers are now loaded directly from store and
without access control
|
2021-09-23 07:01:55 +02:00 |
|
Denis Arh
|
49f86f916f
|
Merge branch '2021.9.x-fix-access-token' into 2021.9.x
|
2021-09-22 21:36:01 +02:00 |
|
Denis Arh
|
1c55cee2df
|
Fix access token handling in fed node handshake
|
2021-09-22 21:29:51 +02:00 |
|
Denis Arh
|
92f225654c
|
Fix access token handling in integration test
|
2021-09-22 21:23:42 +02:00 |
|
Denis Arh
|
426b9c4fb0
|
Refactored access token removal logic
|
2021-09-22 21:09:55 +02:00 |
|
Vivek Patel
|
0249641bda
|
Ensure extra user validation during access token validation
- validate a token exist in store
- when user is suspended, deleted or roles are removed - removes ALL user's tokens
|
2021-09-22 21:09:55 +02:00 |
|
Vivek Patel
|
54cbfe20d8
|
Adds JWT token generation methods
- Generates token encoded with user and save it to store
- Updated token generation method usage in Corredor and Impersonalization
|
2021-09-22 21:09:55 +02:00 |
|
Denis Arh
|
5ac8790bc8
|
Fix user-action-props typo (resulted in broken log message)
|
2021-09-22 21:09:35 +02:00 |
|
Denis Arh
|
5b5bec9767
|
Covert ID (uint64) values before JSON encode
This is problematic in two places:
- accessing JSON serialized meta data on action log
- serializing Corredor script argument
|
2021-09-22 19:43:32 +02:00 |
|