Commit Graph

456 Commits

Author SHA1 Message Date
Yunfan Zhang
02db543848 Do not create refresh tokens for apps with implicit grant type.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-08-08 17:37:02 -04:00
Yunfan Zhang
b191f6cfc3 Add AND filter to related search.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-08-01 19:43:57 -07:00
Ryan Petrello
b99f211c7e add some additional validation to JT.credentials
see: https://github.com/ansible/tower/issues/2612
2018-07-30 14:08:27 -04:00
AlanCoding
6d305c60d5 Disallow adding or removing instance from iso-IG 2018-07-23 15:39:30 -04:00
AlanCoding
fd468ac766 raise 400 instead of ignoring if fields mismatch v1/v2 2018-07-16 09:36:43 -04:00
Ryan Petrello
df0e28ec65 don't allow OAuth2 token creation for "external" users
see: https://github.com/ansible/tower/issues/2326
2018-07-12 14:33:59 -04:00
Ryan Petrello
387f7d3d67 don't allow isolated instances in IG.policy_instance_list
see: https://github.com/ansible/tower/issues/2394
2018-07-11 09:29:46 -04:00
Yunfan Zhang
e2ed24aef0 Fix null values on Token modified field. 2018-07-10 16:03:25 -04:00
Alan Rominger
a90329f21b Merge pull request #2385 from AlanCoding/team_org_object_roles
Allow adding teams to org object roles
2018-07-09 15:34:45 -04:00
Yunfan Zhang
307e5204fa Merge pull request #2447 from YunfanZhang42/fix_credential_leak
Forbid users from using unauthorized credentials in projects and inventories.
2018-07-09 15:06:39 -04:00
Yunfan Zhang
270102c188 Forbid users from using unauthorized credentials in projects and inventories.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-07-09 15:04:53 -04:00
AlanCoding
e044b996e5 allow adding teams to org object roles 2018-07-09 14:13:57 -04:00
chris meyers
19e865e9a5 prevent remove iso instance from iso instance groups 2018-07-06 15:34:26 -04:00
chris meyers
aeca21ab5b deny topology changes to iso instances via api 2018-07-06 14:50:17 -04:00
Alan Rominger
0b811a53ff Merge pull request #2410 from AlanCoding/filterama
Show filterable: False if not filterable
2018-07-03 17:32:11 -04:00
Alan Rominger
13c1b87df4 Merge pull request #2191 from AlanCoding/schedule_fixes
Fix bugs creating WFJT schedule with passwords
2018-07-03 16:51:01 -04:00
Alan Rominger
360ad7ad61 Merge branch 'release_3.3.0' into filterama 2018-07-03 15:42:37 -04:00
AlanCoding
b97626bf37 show filterable: False if not filterable 2018-07-03 15:21:10 -04:00
Yunfan Zhang
b4890ee331 Handle exception with invalid HTTP content_type.
Signed-off-by: Yunfan Zhang <yz322@duke.edu>
2018-07-03 13:55:18 -04:00
AlanCoding
f753bea24f Test-based fixes to launch config password handling
Fix bug creating WFJT schedule with passwords:
discard survey_passwords field if given in WFJT
prompts processing method.
Fixed by porting prior JT fix to WFJT method of
same name.

Fix bug where API browser will show encrypted form
of variables in the POST submission box after
failed attempt:
copy extra_data so encrypted data values are not
added in still-linked request.data

Fix a bug where submitted extra_data $encrypted$ string
literal was saved because survey_passwords was empty
when there was no diff from prior.

Allow not answering required password questions with a
non-empty default value when saving a launch config.
The literal $encrypted$ string now gets passed into the
prompts / survey validator.
2018-06-20 14:18:38 -04:00
adamscmRH
b498585c27 fix oauth2 refresh tests for dat112 2018-06-18 13:27:18 -04:00
Yunfan Zhang
2a983e3dec Merge pull request #2152 from YunfanZhang42/host_filter_case_insensitive
Make search in Smart Filter case insensitive.
2018-06-13 16:21:00 -04:00
Yunfan Zhang
f332c0b8c3 Make search in host_filter case insensitive. 2018-06-13 14:16:48 -04:00
Alan Rominger
ce117285e1 Merge pull request #2079 from AlanCoding/creds_no_op
Allow no-op case when modifying deprecated credentials
2018-06-12 09:08:35 -04:00
Yunfan Zhang
1bc1a6f63f Disallow HTTP update methods in job_detail API endpoint. 2018-06-11 14:47:43 -04:00
Yunfan Zhang
0de369b42f Fix job id incorrectly cast to string in ActiveJobConflict. 2018-06-08 09:31:38 -04:00
AlanCoding
dde706b61f allow no-op case when modifying deprecated credentials 2018-06-07 07:16:07 -04:00
chris meyers
0702692ca9 add controller_node to adhoc command job 2018-06-06 16:28:28 -04:00
chris meyers
74155dfc9d add system jobs to controller_node exceptions 2018-06-06 15:04:41 -04:00
chris meyers
8ee4b9680c remove controller_node field from jobs that don't apply 2018-06-06 11:26:15 -04:00
adamscmRH
97c5ff0b33 make scope write by default 2018-06-01 13:24:32 -04:00
Alan Rominger
232ad2a06c Merge pull request #1912 from AlanCoding/other_user_relaunch
Disallow launching jobs with other user's prompts
2018-05-29 11:51:13 -04:00
Christian Adams
b065593e49 Merge pull request #1932 from rooftopcellist/validate_scope
Validate scope
2018-05-25 10:49:02 -04:00
adamscmRH
5d220e8222 add scope validator to token endpoints 2018-05-24 11:06:58 -04:00
Ryan Petrello
63f089c712 allow any authenticated user to access the schedule preview API endpoint
see: https://github.com/ansible/tower/issues/1939
2018-05-23 16:51:58 -04:00
Ryan Petrello
28a42850a2 allow AUTH_LDAP_USER_FLAGS_BY_GROUP to specify an OR'd list for a flag
see: https://github.com/ansible/tower/issues/968
2018-05-23 14:45:46 -04:00
AlanCoding
c3368bc4ff disallow launching with other users prompts 2018-05-22 15:47:36 -04:00
Alan Rominger
7d36bd1fb2 Merge pull request #1786 from AlanCoding/system_params2
Add exception to allow relaunching callback jobs
2018-05-22 12:48:58 -04:00
Ryan Petrello
51f66b8c0a filter /api/v2/users/N/tokens/ to only show tokens for _that_ user
see: https://github.com/ansible/tower/issues/1773
2018-05-17 15:44:35 -04:00
AlanCoding
db6cc7c50b Add exception to allow relaunching callback jobs
allows for execute_role level users to directly
relaunch callback-type jobs, even though limit
has changed from JT, it is a down-selection
2018-05-17 14:41:56 -04:00
Ryan Petrello
b6923bdbeb speed up a handful of really slow stdout tests
before: 59 passed in 95.20 seconds
after: 59 passed in 11.09 seconds
2018-05-17 13:27:18 -04:00
Ryan Petrello
53ef9ed288 never convert ANSI codes to HTML for format /stdout/?format=json
see: https://github.com/ansible/awx/issues/1863
2018-05-16 11:20:55 -04:00
Ryan Petrello
5b55e3cb2b fix a bug that prevented JT admins from editing custom virtualenvs
see: https://github.com/ansible/tower/issues/1754
2018-05-14 14:12:22 -04:00
Jake McDermott
0682d19d5e show filterable:true for filterable fields 2018-05-03 17:37:19 -04:00
AlanCoding
ac20aa954a Replace logging-related restart with dynamic handler
refactor existing handlers to be the related
  "real" handler classes, which are swapped
  out dynamically by external logger "proxy" handler class

real handler swapout only done on setting change

remove restart_local_services method
get rid of uWSGI fifo file

change TCP/UDP return type contract so that it mirrors
  the request futures object
add details to socket error messages
2018-05-02 09:47:22 -04:00
chris meyers
202ddae813 make tower instance group name field read-only 2018-05-01 13:31:24 -04:00
Alan Rominger
f122fb4e1d Merge pull request #1321 from AlanCoding/order_field_validate
Use field validation in both filter classes
2018-04-27 14:34:07 -04:00
AlanCoding
dff0f2f9ed Revert "update tests for org members seeing teams"
This reverts commit fe04f69e89.
2018-04-26 12:21:50 -04:00
AlanCoding
6306ac2825 use field validation in both filter classes 2018-04-26 07:23:20 -04:00
Wayne Witzel III
c37ed32c55 Merge pull request #1204 from AlanCoding/org_members_team
allow org members to see teams in org
2018-04-23 04:15:38 -07:00