synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-08 11:39:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,322 Commits 363 Branches 234 Tags
e0a14f68fa4003ee85c3e83d5ce9541651aebc8e
Commit Graph

16 Commits

Author SHA1 Message Date
Jon Ayers
3120c94c22 feat: add template RBAC/groups (#4235) 2022-10-10 15:37:06 -05:00
Steven Masley
cd4ab97efa feat: Convert rego queries into SQL clauses (#4225) 
* feat: Convert rego queries into SQL clauses

* Fix postgres quotes to single quotes

* Ensure all test cases can compile into SQL clauses

* Do not export extra types

* Add custom query with rbac filter

* First draft of a custom authorized db call

* Add comments + tests

* Support better regex style matching for variables

* Handle jsonb arrays

* Remove auth call on workspaces

* Fix PG endpoints test

* Match psql implementation

* Add some comments

* Remove unused argument

* Add query name for tracking

* Handle nested types

This solves it without proper types in our AST.
Might bite the bullet and implement some better types

* Add comment

* Renaming function call to GetAuthorizedWorkspaces
 2022-10-04 11:35:33 -04:00
Steven Masley
d8008de77a chore: Optimize Filter() for small lists (#4282) 2022-09-30 15:55:08 -04:00
Colin Adler
15b9a59786 chore: only trace rbac.Filter (#4177) 2022-09-23 15:21:56 -05:00
Kyle Carberry
8738755ffc chore: Compile rego once to save CPU cycles in testing (#4169) 
Compiling rego isn't very fast, so this should speed up tests in CI!
 2022-09-23 16:26:04 +00:00
Steven Masley
2e30d0512e chore: Move scope into the same auth call (#4162) 
Scopes now are enforced in the same Authorize call as the roles. 
Vs 2 `Authorize()` calls
 2022-09-23 11:07:30 -04:00
Dean Sheather
29d804e692 feat: add API key scopes and application_connect scope (#4067) 2022-09-19 17:39:02 +00:00
Colin Adler
b340634aaa feat: add rbac tracing (#4093) 2022-09-16 18:32:15 +00:00
Kyle Carberry
b0fe9bcdd1 chore: Upgrade to Go 1.19 (#3617) 
This is required as part of #3505.
 2022-08-21 22:32:53 +00:00
Steven Masley
3ae42f4de9 chore: Update rego to be partial execution friendly (#3449) 
- Improves performance of batch authorization calls
- Enables possibility to convert rego auth calls into SQL WHERE clauses
 2022-08-11 22:07:48 +00:00
Steven Masley
eea8dc6c16 feat: Add rbac to templateversion+orgmember endpoints (#1713) 2022-05-25 11:00:59 -05:00
Steven Masley
c7ca86d374 feat: Implement RBAC checks on /templates endpoints (#1678) 
* feat: Generic Filter method for rbac objects
 2022-05-24 08:43:34 -05:00
Steven Masley
4ad5ac2d4a feat: Rbac more coderd endpoints, unit test to confirm (#1437) 
* feat: Enforce authorize call on all endpoints
- Make 'request()' exported for running custom requests
* Rbac users endpoints
* 401 -> 403
 2022-05-17 13:43:19 -05:00
Colin Adler
97a95f1377 chore: upgrade golangci-lint to v1.46.0 (#1373) 2022-05-10 16:04:23 -05:00
Steven Masley
35211e2190 feat: Add user roles, but do not yet enforce them (#1200) 
* chore: Rework roles to be expandable by name alone
 2022-04-29 09:04:19 -05:00
Steven Masley
770c567123 feat: Add RBAC package for managing user permissions (#929) 
This PR adds an RBAC package for managing using permissions:
- The top-level `authz.Authorize` function is the main user-facing entrypoint to the package.
- Actual permission evaluation is handled in `policy.rego`.
- Unit tests for `authz.Authorize` are in `authz_test.go`
- Documentation for the package is in `README.md`.

Co-authored-by: Cian Johnston <cian@coder.com>
 2022-04-13 08:35:35 -05:00