Ryan Petrello
95ea370e5e
add API versioning for /api/v2/
2017-03-30 15:11:12 -04:00
AlanCoding
78b474d92e
shortcut for generating role summary_fields
2017-02-03 22:56:10 -05:00
AlanCoding
39c153f14a
flake8 fix, extra line
2017-01-30 16:18:41 -05:00
Takao Fujiwara
06883e6fda
Update I18N strings after I18N QE
...
Signed-off-by: Takao Fujiwara <takao.fujiwara1@gmail.com>
2017-01-30 17:51:15 +09:00
AlanCoding
3663c97ac2
Prohibit adding singleton permissions as child of team
2016-12-07 08:42:39 -05:00
Aaron Tan
9e4655419e
Fix flake8 E302 errors.
2016-11-15 20:59:39 -05:00
AlanCoding
2faafa8071
Merge branch 'devel' of https://github.com/ansible/ansible-tower into wf_rbac_prompt
2016-09-30 10:06:23 -04:00
AlanCoding
2ffa7a91ec
Workflow RBAC and prompting basic changes
2016-09-20 17:16:26 -04:00
jangsutsr
b719b7276f
Refactor for better performance.
2016-09-20 11:28:19 -04:00
Aaron Tan
300020df07
Make system admin and system auditor visible to oprhaned users.
2016-09-20 11:26:20 -04:00
AlanCoding
26ce3a4773
avoid lookup of content_type for description when summarizing object_roles
2016-09-01 15:08:32 -04:00
Akita Noek
b4810f6486
Typo
2016-07-06 13:38:43 -04:00
Akita Noek
b94902d970
filter_visible_roles performance enhancement
2016-07-06 12:20:52 -04:00
Akita Noek
a126736332
Expand role visibility such that you can always see all roles on any objects you can see
...
Completes #2774
2016-07-05 15:06:25 -04:00
Akita Noek
e818daa74f
Ensure system auditors/admins can see all roles
...
Partial fix for #2744
2016-07-05 14:01:46 -04:00
Wayne Witzel III
16bc0cdf0b
add helper decorator to ensure signleton roles see the proper role list
2016-07-01 10:38:02 -04:00
Wayne Witzel III
87ffded774
renaming Credential.owner_role -> Credential.admin_role
2016-06-24 16:55:07 -04:00
Akita Noek
20ba96ae84
Description update
...
With our role removal from inventory groups this description needed some
updating
2016-06-24 09:49:14 -04:00
Wayne Witzel III
599902da47
update api view/serializers for new role names
2016-05-13 12:00:33 -04:00
Akita Noek
6958e81d00
Filled in RBAC descriptions
...
#1655
2016-05-13 10:11:38 -04:00
Akita Noek
9921d90316
Fixed duplicate active_roles entries
...
#1692
2016-04-25 20:33:59 -04:00
Akita Noek
3ffefd30a3
flake8
2016-04-25 14:43:03 -04:00
Akita Noek
4c15374b05
Optimized (user|team)/:n/roles/
2016-04-25 14:29:05 -04:00
Akita Noek
9df157c971
Added gfk index pair for Role for our access_list queries
2016-04-25 14:29:05 -04:00
Akita Noek
6250d9f7e7
Optimized RBAC visible_roles query
2016-04-25 14:29:05 -04:00
Akita Noek
17120ffe4f
Futher optimze role rebuilding to be aware of whether we are adding or removing parentage
2016-04-22 10:17:21 -04:00
Akita Noek
0c6dcb2337
Optimized our simultaneous role ancestry rebuilding method
2016-04-22 10:17:21 -04:00
Akita Noek
280993a15d
Dropped stored role name/description and other superflous fields
...
For name and description, we'll derive these from the role_field and
content type, which is much better for lots of reasons (eg changing text
the future). Also ditched the rest of the fields comming from the
standard common base model, we didn't use them and they cost several
indexes on the table.
2016-04-22 10:16:04 -04:00
Wayne Witzel III
0309757439
Add parent ORing for Role field, renamed permissions -> active_roles
2016-04-21 15:54:36 -04:00
Akita Noek
0434712dc9
Complete the removal of cycle support in RBAC
...
We removed the actual need for this when we broke the org<->team cycle.
This patch removes the code we had to support that, but since it's
costly and unused, it's now nixxed.
2016-04-19 22:14:38 -04:00
Akita Noek
127bff5134
Moved role rebuild batching down into sim rebuild code so we can call it directly
2016-04-19 22:14:38 -04:00
Akita Noek
96aa3e2555
Attempt 2 at making jenkins' sqlite happy
2016-04-18 15:26:09 -04:00
Akita Noek
0349737538
Attempt at a workaround for our larger sqlite tests
...
These tests are only failing on jenkins, not on our local dev
environments.
2016-04-18 14:32:21 -04:00
Akita Noek
2a676d80ce
Handle vacuous role rebuilding condition instead of exploding
2016-04-18 08:45:44 -04:00
Akita Noek
85843cc6ad
Fixed up some RBAC indexing
2016-04-17 10:20:38 -04:00
Akita Noek
5d0c6cc044
Switch to custom ancestry table for some optimized queries
...
Now we can stuff some more data in this table so we can take advantage
of some multi-column indexing and avoid another to join for our
accessible objects and permissions queries.
2016-04-16 18:27:57 -04:00
Akita Noek
2979f6e6d3
jobtemplate execute_role is now child of admin_role
2016-04-15 15:55:59 -04:00
Wayne Witzel III
6229e978e9
fix team tests
2016-04-15 15:26:49 -04:00
Akita Noek
fa10d562c1
Replaced get user permissions with get_roles_on_resource
2016-04-15 14:36:52 -04:00
Akita Noek
859d670fc8
Removed RolePermission stuff for Hosts
2016-04-15 10:59:15 -04:00
Akita Noek
6d34ca9d22
Proof of concept hacks for RolePermission elimination
2016-04-15 10:03:50 -04:00
Akita Noek
872ce2f9e8
Merge branch 'ancestor-rebuild-optimization' into 11th-hour
2016-04-14 21:56:43 -04:00
Akita Noek
25f0d65c5f
Ancestor rebuild optimization progress
2016-04-14 21:56:10 -04:00
Akita Noek
8887db231b
Progress on ripping out RolePermissions
2016-04-14 09:44:20 -04:00
Akita Noek
7b4e7ec5b3
Switch to explicitly stored implicit role parents
...
Completes #1496
2016-04-12 14:50:52 -04:00
Wayne Witzel III
a1d1ddee2b
cleaner get/create impl
2016-03-31 09:58:23 -04:00
Wayne Witzel III
20aa8c02d1
Added accessible_by/objects support for Team
2016-03-24 10:45:49 -04:00
Akita Noek
ce669b03ad
Switched to a nicer contextmanager implemenation for role hierarchy rebuild batching
...
#1206
2016-03-15 15:30:43 -04:00
Akita Noek
b499555be4
Added auto_generated flag for RolePermissions
2016-03-15 13:36:28 -04:00
Akita Noek
b486c8d658
Merge branch 'rbac-resource-gfk' into rbac
2016-03-09 10:17:58 -05:00
