116 Commits

Author SHA1 Message Date
Matthew Jones
769fe18724 Wrap up other places where the old license access method is used 2016-01-25 20:59:18 -05:00
Matthew Jones
b1cbdd3a09 Remove tower settings filter 2016-01-12 15:26:23 -05:00
Matthew Jones
84c2e71907 Merge pull request #541 from matburt/database_config_source
Database config source
2016-01-12 11:20:43 -05:00
Matthew Jones
910f9bd4a3 Fixing up some flake8 issues 2015-12-17 10:48:15 -05:00
Matthew Jones
35b19bf220 Update settings references
* PROOT
* Pendo tracking state
* ad hoc commands
* activity stream
* org admin visibility
2015-12-15 16:44:08 -05:00
Matthew Jones
7867a58c00 RBAC and settings reset
* Initial super-user only rbac with notes for future user-settings
  support
* Clearing individual and all settings back to defaults
2015-12-15 12:12:54 -05:00
Matthew Jones
e79db58b6d Allow an org admin to delete project updates
Only in their purview (where they can delete or change the original
project)

Plus a bonus unit test!
2015-12-01 16:02:10 -05:00
Chris Meyers
97c56d451e allow multi-org expired licenses to delete orgs 2015-11-12 15:33:00 -05:00
Chris Meyers
f051c13374 list cust inv scripts with deleted orgs 2015-10-14 07:36:32 -05:00
Matthew Jones
fd33d7df58 Tweak proj rbac for orphaned projects
Slight tweak to the rbac for projects related to the user who created
them.  IF a user created a project but it is orphaned/not associated
with an organization then they will be able to see/change it.  If,
however, it is created and associated with an organization and then they
are removed as an org admin they will no longer have access to it.
2015-10-13 16:42:12 -04:00
Matthew Jones
f7ebf956c1 Remove the created_by access ability for projects
Now, simply being the creator of a project does not convey any access
for users.  You must be in a project/team that has access to it and you
must be an org admin for an org that has the project to be able to make
changes to it
2015-10-13 11:24:48 -04:00
Matthew Jones
46aa6dfabb Prevent deleting organizations on basic licenses
Plus unit tests
2015-10-12 14:52:03 -04:00
Chris Meyers
2f824df9ee use subqueries instead of python ids 2015-09-22 22:41:25 -04:00
Chris Meyers
0e8e09b0ac rbac job & job template performance fix 2015-09-14 16:25:33 -04:00
Matthew Jones
47a3e69636 Optimize inventory read check for Job Templates
Our old check used an extremely inefficient boolean logic AND and
generated a bad query.   This does a simpler check by querying the
inventories that the user has access to and using that as a simple
condition when performing the job template permission query
2015-07-31 00:06:12 -04:00
Matthew Jones
df61fd6ab8 Check inventory access for normal users when deciding what job templates
show up in the job template queryset
2015-06-11 16:24:54 -04:00
John Mitchell
32d1c0e4db fixed copyright date 2015-06-11 16:10:23 -04:00
Matthew Jones
7d8edd9617 Check survey license enabled when creating, updating, and starting job
templates with surveys enabled
2015-06-01 17:01:49 -04:00
Matthew Jones
06464333a6 Check license before launching job template and disallow scan job
template launch if license is unsupported
2015-06-01 14:15:42 -04:00
Matthew Jones
b3da3b34a3 Changing some legal headers for python source files 2015-05-29 12:10:39 -04:00
Matthew Jones
5b3b4b48c0 Fix an issue when creating scan job templates where we weren't obeying
the license flag, so folks could still create scan jobs even if they
weren't enabled by the license.  Plus Unit Tests
2015-05-28 15:59:49 -04:00
Chris Church
1b1d43dc59 Prevent launching ad hoc commands when license has expired. 2015-05-21 14:13:37 -04:00
Chris Church
2d1d371582 Return 400 when attempting to relaunch an ad hoc command with deleted inventory. Fixes https://trello.com/c/IbvBelXJ 2015-05-11 20:32:43 -04:00
Chris Church
9e898bf42a Add support for deleting ad hoc commands. Fixes https://trello.com/c/WLnhi28V 2015-05-11 20:14:15 -04:00
Chris Church
7be54d585b Fix RBAC query bug in checking if user can run ad hoc commands. Fixes https://trello.com/c/fl36Hvh3 2015-04-16 15:27:16 -04:00
Chris Church
76132dbab2 Update license check when adding hosts. Fixes https://trello.com/c/Llol9BCJ 2015-04-16 12:28:13 -04:00
Chris Church
e2a6f100e1 Finish ad hoc command unit tests. 2015-04-05 18:32:04 -04:00
Chris Church
88e7f6624c Update relaunch endpoints to use custom serializer, check passwords needed before creating/copying job or ad hoc command. 2015-03-31 17:40:00 -04:00
Chris Church
02eda72bd9 Add name field for ad hoc commands, get relaunch working. 2015-03-31 16:42:35 -04:00
Chris Church
f7b8d510dc Implement support for ad hoc commands. 2015-03-30 13:04:19 -04:00
Matthew Jones
3d46a4ce37 Some testing and bug fixes for scan job templates 2015-03-06 11:00:28 -05:00
Matthew Jones
cca8c3fac1 Updated rbac for scan job and job template types 2015-03-05 12:40:28 -05:00
Matthew Jones
c4e320bf76 rbac tweaks for scan jobs templates 2015-03-03 15:08:18 -05:00
Matthew Jones
bb3732b2c1 Cleaning up some flake8 errors, pyflakes in this case 2015-02-10 17:00:23 -05:00
Matthew Jones
f51e248c8b Fix a Project query rbac performance issue 2015-02-10 12:35:21 -05:00
Matthew Jones
9e97783b13 Fixing up more pep8 issues 2015-02-04 16:32:14 -05:00
Matthew Jones
6e6a709165 Fixing up some pep8 issues 2015-02-03 13:46:58 -05:00
Matthew Jones
20910e0e95 Fix up some serious issues posting new surveys and deleting them by
non-super users.   Also fix up some issues checking can_change for job
templates for operations like PATCH where not all of the data points
will be submitted
2015-01-27 15:12:58 -05:00
Matthew Jones
b5db74a7d9 Generalize the python boolean converter so we can use it in RBAC methods 2015-01-26 11:57:21 -05:00
Matthew Jones
16a9af0803 Fix an issue where non-org-admin users with appropriate job template
permissions were not able to view or edit schedule details
2015-01-21 13:49:24 -05:00
Matthew Jones
4ce0fc4eb4 Purge old super user check decorator in favor of using RBAC. Update
unit tests
2015-01-19 13:54:49 -05:00
Matthew Jones
da658ee524 Fix an issue with relaunching jobs 2014-12-18 16:39:04 -05:00
Matthew Jones
9ce6101cd4 Do not display inventory scripts for which the organization is inactive 2014-12-18 10:04:40 -05:00
Matthew Jones
96433b07d4 Incorrect object reference in Custom Inventory Script read acl for non-super-users 2014-12-11 13:47:33 -05:00
Chris Church
109988da13 Fix typo, modify can_update to prevent inventory update from even starting when source script is missing. 2014-12-03 18:35:33 -05:00
Matthew Jones
e05f9e081c Throw an error when running an inventory update against an inventory
script that has been deleted
2014-12-03 16:09:55 -05:00
Matthew Jones
19c0d04885 Adding organization reference to the custom inventory script 2014-12-03 15:05:44 -05:00
Matthew Jones
fc5eb09e2a Fix up some rbac issues that were blocking survey taker incidentally and
otherwise preventing normal users with the right permissions from
starting jobs
2014-12-01 14:01:03 -05:00
Chris Church
ad856391f6 Use select_related and other misc fixes to improve performance and reduce queries. 2014-11-24 21:12:21 -05:00
Luke Sneeringer
f49fe9ff56 Make it faster. 2014-11-24 14:41:13 -06:00