Matthew Jones
769fe18724
Wrap up other places where the old license access method is used
2016-01-25 20:59:18 -05:00
Matthew Jones
b1cbdd3a09
Remove tower settings filter
2016-01-12 15:26:23 -05:00
Matthew Jones
84c2e71907
Merge pull request #541 from matburt/database_config_source
...
Database config source
2016-01-12 11:20:43 -05:00
Matthew Jones
910f9bd4a3
Fixing up some flake8 issues
2015-12-17 10:48:15 -05:00
Matthew Jones
35b19bf220
Update settings references
...
* PROOT
* Pendo tracking state
* ad hoc commands
* activity stream
* org admin visibility
2015-12-15 16:44:08 -05:00
Matthew Jones
7867a58c00
RBAC and settings reset
...
* Initial super-user only rbac with notes for future user-settings
support
* Clearing individual and all settings back to defaults
2015-12-15 12:12:54 -05:00
Matthew Jones
e79db58b6d
Allow an org admin to delete project updates
...
Only in their purview (where they can delete or change the original
project)
Plus a bonus unit test!
2015-12-01 16:02:10 -05:00
Chris Meyers
97c56d451e
allow multi-org expired licenses to delete orgs
2015-11-12 15:33:00 -05:00
Chris Meyers
f051c13374
list cust inv scripts with deleted orgs
2015-10-14 07:36:32 -05:00
Matthew Jones
fd33d7df58
Tweak proj rbac for orphaned projects
...
Slight tweak to the rbac for projects related to the user who created
them. IF a user created a project but it is orphaned/not associated
with an organization then they will be able to see/change it. If,
however, it is created and associated with an organization and then they
are removed as an org admin they will no longer have access to it.
2015-10-13 16:42:12 -04:00
Matthew Jones
f7ebf956c1
Remove the created_by access ability for projects
...
Now, simply being the creator of a project does not convey any access
for users. You must be in a project/team that has access to it and you
must be an org admin for an org that has the project to be able to make
changes to it
2015-10-13 11:24:48 -04:00
Matthew Jones
46aa6dfabb
Prevent deleting organizations on basic licenses
...
Plus unit tests
2015-10-12 14:52:03 -04:00
Chris Meyers
2f824df9ee
use subqueries instead of python ids
2015-09-22 22:41:25 -04:00
Chris Meyers
0e8e09b0ac
rbac job & job template performance fix
2015-09-14 16:25:33 -04:00
Matthew Jones
47a3e69636
Optimize inventory read check for Job Templates
...
Our old check used an extremely inefficient boolean logic AND and
generated a bad query. This does a simpler check by querying the
inventories that the user has access to and using that as a simple
condition when performing the job template permission query
2015-07-31 00:06:12 -04:00
Matthew Jones
df61fd6ab8
Check inventory access for normal users when deciding what job templates
...
show up in the job template queryset
2015-06-11 16:24:54 -04:00
John Mitchell
32d1c0e4db
fixed copyright date
2015-06-11 16:10:23 -04:00
Matthew Jones
7d8edd9617
Check survey license enabled when creating, updating, and starting job
...
templates with surveys enabled
2015-06-01 17:01:49 -04:00
Matthew Jones
06464333a6
Check license before launching job template and disallow scan job
...
template launch if license is unsupported
2015-06-01 14:15:42 -04:00
Matthew Jones
b3da3b34a3
Changing some legal headers for python source files
2015-05-29 12:10:39 -04:00
Matthew Jones
5b3b4b48c0
Fix an issue when creating scan job templates where we weren't obeying
...
the license flag, so folks could still create scan jobs even if they
weren't enabled by the license. Plus Unit Tests
2015-05-28 15:59:49 -04:00
Chris Church
1b1d43dc59
Prevent launching ad hoc commands when license has expired.
2015-05-21 14:13:37 -04:00
Chris Church
2d1d371582
Return 400 when attempting to relaunch an ad hoc command with deleted inventory. Fixes https://trello.com/c/IbvBelXJ
2015-05-11 20:32:43 -04:00
Chris Church
9e898bf42a
Add support for deleting ad hoc commands. Fixes https://trello.com/c/WLnhi28V
2015-05-11 20:14:15 -04:00
Chris Church
7be54d585b
Fix RBAC query bug in checking if user can run ad hoc commands. Fixes https://trello.com/c/fl36Hvh3
2015-04-16 15:27:16 -04:00
Chris Church
76132dbab2
Update license check when adding hosts. Fixes https://trello.com/c/Llol9BCJ
2015-04-16 12:28:13 -04:00
Chris Church
e2a6f100e1
Finish ad hoc command unit tests.
2015-04-05 18:32:04 -04:00
Chris Church
88e7f6624c
Update relaunch endpoints to use custom serializer, check passwords needed before creating/copying job or ad hoc command.
2015-03-31 17:40:00 -04:00
Chris Church
02eda72bd9
Add name field for ad hoc commands, get relaunch working.
2015-03-31 16:42:35 -04:00
Chris Church
f7b8d510dc
Implement support for ad hoc commands.
2015-03-30 13:04:19 -04:00
Matthew Jones
3d46a4ce37
Some testing and bug fixes for scan job templates
2015-03-06 11:00:28 -05:00
Matthew Jones
cca8c3fac1
Updated rbac for scan job and job template types
2015-03-05 12:40:28 -05:00
Matthew Jones
c4e320bf76
rbac tweaks for scan jobs templates
2015-03-03 15:08:18 -05:00
Matthew Jones
bb3732b2c1
Cleaning up some flake8 errors, pyflakes in this case
2015-02-10 17:00:23 -05:00
Matthew Jones
f51e248c8b
Fix a Project query rbac performance issue
2015-02-10 12:35:21 -05:00
Matthew Jones
9e97783b13
Fixing up more pep8 issues
2015-02-04 16:32:14 -05:00
Matthew Jones
6e6a709165
Fixing up some pep8 issues
2015-02-03 13:46:58 -05:00
Matthew Jones
20910e0e95
Fix up some serious issues posting new surveys and deleting them by
...
non-super users. Also fix up some issues checking can_change for job
templates for operations like PATCH where not all of the data points
will be submitted
2015-01-27 15:12:58 -05:00
Matthew Jones
b5db74a7d9
Generalize the python boolean converter so we can use it in RBAC methods
2015-01-26 11:57:21 -05:00
Matthew Jones
16a9af0803
Fix an issue where non-org-admin users with appropriate job template
...
permissions were not able to view or edit schedule details
2015-01-21 13:49:24 -05:00
Matthew Jones
4ce0fc4eb4
Purge old super user check decorator in favor of using RBAC. Update
...
unit tests
2015-01-19 13:54:49 -05:00
Matthew Jones
da658ee524
Fix an issue with relaunching jobs
2014-12-18 16:39:04 -05:00
Matthew Jones
9ce6101cd4
Do not display inventory scripts for which the organization is inactive
2014-12-18 10:04:40 -05:00
Matthew Jones
96433b07d4
Incorrect object reference in Custom Inventory Script read acl for non-super-users
2014-12-11 13:47:33 -05:00
Chris Church
109988da13
Fix typo, modify can_update to prevent inventory update from even starting when source script is missing.
2014-12-03 18:35:33 -05:00
Matthew Jones
e05f9e081c
Throw an error when running an inventory update against an inventory
...
script that has been deleted
2014-12-03 16:09:55 -05:00
Matthew Jones
19c0d04885
Adding organization reference to the custom inventory script
2014-12-03 15:05:44 -05:00
Matthew Jones
fc5eb09e2a
Fix up some rbac issues that were blocking survey taker incidentally and
...
otherwise preventing normal users with the right permissions from
starting jobs
2014-12-01 14:01:03 -05:00
Chris Church
ad856391f6
Use select_related and other misc fixes to improve performance and reduce queries.
2014-11-24 21:12:21 -05:00
Luke Sneeringer
f49fe9ff56
Make it faster.
2014-11-24 14:41:13 -06:00