3
0
Commit Graph

215 Commits

Author SHA1 Message Date
Vivek Patel
7da0940ae1 Add IncTotal param support to all resource List API
- Updates rdbms.go.tpl to extends store search method to include total in response
2022-09-21 19:24:43 +05:30
Vivek Patel
9d46f5c234 Add duplicate detection for compose record values
For now only case-sensitive detection is supported, there are 2 type of duplicate detection, one is strict mode which will throw an error on record save if there is any duplicate record with matching value and non-strict mode will only show a warning and won't prevent record saving.
2022-09-21 19:24:43 +05:30
Denis Arh
fab9371805 Fix unclosed file-handles (attachments) #410 2022-09-20 12:34:28 +02:00
Tomaž Jerman
82686f14e9 Rework record report to use maps instead of iterators
Removes the need to do so in workflow handlers; the dataset will
be small so the JSON encoding magic isn't really needed.
2022-09-19 16:22:37 +02:00
Tomaž Jerman
c0631666d1 Add content-type to record revision endpoint
Correct, and fixes cases where mime sniffing is disabled.
2022-09-14 10:17:22 +02:00
Tomaž Jerman
7d18058f58 Rework the cmpose report endpoint to the DAL pipeline 2022-09-14 10:17:22 +02:00
Denis Arh
01f860f7f6 Rename record.FindSensitive fn to SearchSensitive 2022-08-11 19:50:01 +02:00
Denis Arh
4f0d0ad6c1 Change compose record labels to meta 2022-08-11 19:33:07 +02:00
Denis Arh
4fa0e561c1 Wrap 'response' around revisions return value 2022-08-03 18:00:46 +02:00
Denis Arh
54060f5ff8 Add user credentials management endpoints 2022-08-01 15:19:47 +02:00
Denis Arh
c9442260c5 Add support for revisions on compose records 2022-08-01 08:55:46 +02:00
Denis Arh
a58eb1e052 Restructure config on compose module 2022-07-30 15:11:13 +02:00
Vivek Patel
fef77a7a47 Refactor rules endpoint
- Removes specific params
- Improves RuleSet.FilterResource to accept multiple resources
- Rework FindRules method in access-controller tpl
2022-07-27 22:43:07 +05:30
Tomaž Jerman
eb917eed6e Refactor data-privacy/sensitive-data to data-privacy/records 2022-07-25 16:56:15 +02:00
Vivek Patel
f160d391f5 Add filters to permissions for role route
It allows filtering for specific rules and also the rules which are applied to the resource, and not to a specific resource.

Introduces generic methods for RuleSet and FindRules method to access_control generation template.
2022-07-19 17:30:26 +05:30
Vivek Patel
56a7bfa821 Add route for listing sensitive modules
It will list out all the privacy related modules, that have one or more private fields.
2022-07-18 17:24:37 +05:30
Denis Arh
39046c52d0 Harden RBAC and refactor check tracking
- stricter rule checking when multiple roles have permissions on same
   resource
 - tracking (prev: evaluation) is refactored to stand out less than
   previous solution
 - performance optimization on certain situations (earlier fn return)
2022-07-14 11:07:10 +02:00
Tomaž Jerman
2fddadc92a Refactor NS clone to reuse export/import core 2022-07-04 12:55:44 +02:00
Tomaž Jerman
9f7e87f30e Refactor NS import/export for above changes 2022-07-04 12:55:05 +02:00
Denis Arh
bdd9318f93 Refactor and improve DAL implementation and init
Changes:
 - Boot initialization follows standard impl
 - Improved DAL connection management (adding, reloading, removing)
 - Cleaner and more detailed logging
 - Primary store connection is now reused when added to DAL
2022-07-01 18:13:54 +02:00
Denis Arh
9ce63f1210 Implement ownership access-control on record creation
Besides "owner.manage" on record resoure we now also have
"owned-record.create" on module.
2022-06-28 15:58:57 +02:00
Denis Arh
14d3b7033d Refactor RBAC evaluation processing 2022-06-28 12:53:51 +02:00
Tomaž Jerman
83ba7faa0f Add /permissions/evaluate endpoints to evaluate RBAC rules 2022-06-27 14:28:52 +02:00
Tomaž Jerman
71b3aacae5 Fix edgecase where empty sets would return 2022-06-14 20:35:42 +02:00
Tomaž Jerman
91552f607f Fix inconsistent naming for private data endpoint 2022-06-14 20:35:42 +02:00
Tomaž Jerman
2afd806c2e Allow sensitive data collection to filter by connectionID 2022-06-14 20:35:42 +02:00
Tomaž Jerman
2497dead2e Temporarily use the field's private flag for sensitive data collection 2022-06-14 20:35:42 +02:00
Tomaž Jerman
ffb8dc1473 Add missing JSON tag params 2022-06-14 20:35:42 +02:00
Tomaž Jerman
4d9a2d0181 Add POC endpoint for sensitive data collection 2022-06-14 20:35:42 +02:00
Tomaž Jerman
d7be55948c Quick refactor of other services for DAL
@todo cleanup, refactor
2022-06-14 12:08:18 +02:00
Vivek Patel
86431fe82f Add rest endpoints for chart translations
It allows saving/updating yAxis label and metric label translations
2022-06-14 13:17:44 +05:30
Tomaž Jerman
8de5fe8502 Add canManageOwnerOnRecord to record response 2022-06-02 13:25:57 +02:00
Tomaž Jerman
9610e35073 Add REST API params for compose record owner 2022-06-02 12:38:51 +02:00
Tomaž Jerman
94fbe4bd44 Improve DAL sensitivity level
* Integrate with pkg/dal package
* Additional validation/constraints
2022-05-26 13:24:16 +02:00
Tomaž Jerman
b85f16a368 Add slight structure rename, add supporting services
* Add system connection CRUD & service
* Simplify compose type definitions
2022-05-20 15:37:33 +02:00
Tomaž Jerman
46eb0f1749 Fix missing role references for namespace export 2022-03-23 12:06:56 +01:00
Tomaž Jerman
9e5fd42d48 Limit/default compose record list rest endpoint 2022-03-14 15:23:41 +01:00
Tomaž Jerman
8e679bf97c Improve namespace export
* Add RBAC rules
* add resource translations
* slight refactor
2022-02-25 16:48:25 +01:00
Denis Arh
0f6e712487 Append custom args when executing corredor scripts via Compose REST handlers 2022-02-25 15:13:14 +01:00
Denis Arh
6f19f00b29 Improve attachment uploading & constraints 2022-02-25 08:35:50 +01:00
Tomaž Jerman
bc1550938f Prevent compose-system import cycles 2022-02-17 13:11:50 +01:00
Denis Arh
1949782ccd Remove unused CustomRowScanner & RowScanners features from store 2022-02-12 09:00:13 +01:00
Denis Arh
b478b37775 Add support for page config 2022-02-10 13:55:54 +01:00
Denis Arh
53dd7cc292 Validate token and resolve identity from token earlier in the chain. 2022-02-09 10:58:47 +01:00
Denis Arh
74d6eabf94 Various template & def fixes 2022-01-26 16:27:38 +01:00
Denis Arh
691481424a Make compose page removal more flexible
Support four delete strategies
 - abort: raise an error of page to be deleted contains subpages
 - force: delete the page regardles of any potential subpages
 - cascade: remove all subpages
 - rebase: remove page and move subpages one level lower (to the place
   where the parent page was)
2022-01-26 15:50:21 +01:00
Denis Arh
6c3bef0750 Refactor token-issuer (ex-jwt) to be more robust and configurable 2022-01-21 15:31:10 +01:00
Tomaž Jerman
4b113af9cc Allow content-type header to specify the charset 2022-01-18 21:50:19 +01:00
Peter Grlica
937ec1d584 Updated generated files 2022-01-18 21:50:18 +01:00
Denis Arh
59ec77e204 Refactor JWT implementation 2022-01-18 21:50:18 +01:00