f827829afe
feat: synchronize oidc user roles ( #8595 )
...
* feat: oidc user role sync
User roles come from oidc claims. Prevent manual user role changes
if set.
* allow mapping 1:many
2023-07-24 08:34:24 -04:00
749307ef08
feat: provide endpoint to lock/unlock workspace ( #8239 )
2023-06-28 16:12:49 -05:00
3368b8b65f
chore: Minor rbac memory optimization ( #7391 )
...
* test: Add benchmark for static rbac roles
* static roles should only be allocated once
* A unit test that modifies the ast value should not mess with the globals
* Cache subject AST values to avoid reallocating slices
2023-05-03 14:42:24 -05:00
9d39371ee0
feat: Option to remove WorkspaceExec from owner role ( #7050 )
...
* chore: Add AllResources option for listing all RBAC objects
* Owners cannot do workspace exec site wide
* Fix FE authchecks to valid RBAC resources
2023-04-11 08:57:23 -05:00
fab8da633b
chore: Merge more rbac files ( #6927 )
...
* chore: Merge more rbac files
- Remove cache.go -> authz.go
- Remove query.go -> authz.go
- Remove role.go -> roles.go
* Order imports
* fmt
2023-04-03 09:05:06 -05:00
ce51435507
chore: Merge some rbac files, move some functions around ( #6916 )
...
* chore: Merge some rbac files, move some functions around
* Fix imports
2023-03-31 09:46:38 -05:00
