Steven Masley 2089006fbc feat!: drop reading other 'user' permission (#8650) ...

* feat: drop reading other 'user' permission

Members of the platform can no longer read or list other users.
Resources that have "created_by" or "initiated_by" still retain
user context, but only include username and avatar url.

Attempting to read a user found via those means will result in
a 404.

* Hide /users page for regular users
* make groups a privledged endpoint
* Permissions page for template perms
* Admin for a given template enables an endpoint for listing users/groups.

2023-07-26 10:33:48 -04:00

..

apidoc

feat!: drop reading other 'user' permission (#8650)

2023-07-26 10:33:48 -04:00

apikey

chore: upgrade sqlc to 1.19.1 (#8511)

2023-07-15 09:07:19 +03:00

audit

chore: upgrade sqlc to 1.19.1 (#8511)

2023-07-15 09:07:19 +03:00

autobuild

feat: add deleting_at column to workspaces (#8333)

2023-07-20 22:01:11 -05:00

awsidentity

chore: format Go more aggressively

2023-02-18 18:32:09 -06:00

azureidentity

fix: add more cached certificates to azure instance identity (#6519)

2023-03-08 19:32:10 -06:00

coderdtest

feat!: drop reading other 'user' permission (#8650)

2023-07-26 10:33:48 -04:00

database

feat!: drop reading other 'user' permission (#8650)

2023-07-26 10:33:48 -04:00

devtunnel

fix(cli): speed up CLI over SSH (#7885)

2023-06-07 05:22:58 +00:00

gitauth

fix: use expires_in field for git device refresh (#8411)

2023-07-11 09:28:52 +00:00

gitsshkey

feat: convert entire CLI to clibase (#6491)

2023-03-23 17:42:20 -05:00

healthcheck

fix: use *string instead of error in healthcheck response (#8234)

2023-06-27 19:13:54 +00:00

httpapi

feat: add single tailnet support to moons (#8587)

2023-07-19 11:11:11 -05:00

httpmw

feat: add single tailnet support to moons (#8587)

2023-07-19 11:11:11 -05:00

metricscache

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

parameter

feat!: drop support for legacy parameters (#7663)

2023-06-02 11:16:46 +02:00

prometheusmetrics

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

provisionerdserver

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

rbac

feat!: drop reading other 'user' permission (#8650)

2023-07-26 10:33:48 -04:00

schedule

feat: add user quiet hours schedule and restart requirement feature flag (#8115)

2023-07-20 23:35:41 +10:00

searchquery

feat: add resource_target to audit log search (#8423)

2023-07-11 13:05:21 -04:00

telemetry

chore: add more rules to ensure logs consistency (#8104)

2023-06-21 12:00:38 +02:00

tracing

feat: unified tracing between coderd<->provisionerd (#7370)

2023-05-03 23:02:35 +00:00

unhanger

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

updatecheck

chore: improve the setup experience with various fixes (#8130)

2023-06-21 18:23:59 -05:00

userpassword

feat: add minimum password entropy requirements (#6090)

2023-02-08 14:10:08 -06:00

util

chore(coderd/util/tz): skip flaky test (#8652)

2023-07-21 16:31:52 +00:00

workspaceapps

feat: support localhost apps running https (#8585)

2023-07-19 17:33:07 -05:00

wsbuilder

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

wsconncache

feat: support localhost apps running https (#8585)

2023-07-19 17:33:07 -05:00

activitybump_test.go

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

activitybump.go

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

apikey_test.go

fix(coderd): ensure that user API keys are deleted when a user is (#7270)

2023-04-24 21:48:26 +01:00

apikey.go

feat: add session token injection to provisioner (#7461)

2023-05-17 23:29:22 -05:00

apiroot.go

docs: api root, buildinfo, csp (#5493)

2022-12-22 15:53:14 +01:00

audit_test.go

feat: Guard search queries against common mistakes (#6404)

2023-03-01 23:28:56 -06:00

audit.go

chore: upgrade sqlc to 1.19.1 (#8511)

2023-07-15 09:07:19 +03:00

authorize_test.go

feat!: drop reading other 'user' permission (#8650)

2023-07-26 10:33:48 -04:00

authorize.go

chore: add more rules to ensure logs consistency (#8104)

2023-06-21 12:00:38 +02:00

client_test.go

chore: move workspace apps tests to new package (#7025)

2023-04-06 16:35:27 -05:00

coderd_test.go

feat: Workspace Proxy picker show latency to each proxy (#7486)

2023-05-11 15:42:30 -05:00

coderd.go

feat: synchronize oidc user roles (#8595)

2023-07-24 08:34:24 -04:00

csp.go

chore: add more rules to ensure logs consistency (#8104)

2023-06-21 12:00:38 +02:00

debug_test.go

feat(healthcheck): add failing sections to report (#7789)

2023-06-01 19:21:24 -05:00

debug.go

feat(healthcheck): add failing sections to report (#7789)

2023-06-01 19:21:24 -05:00

deployment_test.go

fix(cli)!: protect client Logger and refactor cli scaletest tests (#8317)

2023-07-06 09:43:39 +01:00

deployment.go

chore: add workspace proxies to the backend (#7032)

2023-04-17 19:57:21 +00:00

deprecated.go

feat!: drop support for legacy parameters (#7663)

2023-06-02 11:16:46 +02:00

experiments_test.go

feat: refactor deployment config (#6347)

2023-03-07 15:10:01 -06:00

experiments.go

feat: add --experiments flag to replace --experimental (#5767)

2023-01-18 19:12:53 +00:00

files_test.go

Stream template upload (#6035)

2023-02-04 20:07:09 +00:00

files.go

chore: Rbac errors should be returned, and not hidden behind 404 (#7122)

2023-04-13 13:06:16 -05:00

gitauth_test.go

fix: use expires_in field for git device refresh (#8411)

2023-07-11 09:28:52 +00:00

gitauth.go

feat: add github device flow for authentication (#8232)

2023-06-29 18:58:01 +00:00

gitsshkey_test.go

chore: remove key comparison check to fix gitsshkey flake (#8002)

2023-06-13 15:51:45 +00:00

gitsshkey.go

feat: Dbauthz is now default, remove out of experimental (#6650)

2023-03-21 09:10:22 -05:00

insights_internal_test.go

feat(coderd): add user latency and template insights endpoints (#8519)

2023-07-21 18:00:19 +00:00

insights_test.go

fix(coderd): fix template insight intervals (#8662)

2023-07-21 20:51:35 +00:00

insights.go

fix(coderd): update icon url to the right one (#8718)

2023-07-25 14:06:58 +00:00

latencycheck.go

chore: add prometheus timing to latency endpoint (#7742)

2023-06-06 10:26:13 -05:00

members.go

feat: embed common client requests into the template html (#8076)

2023-06-18 13:57:27 -05:00

organizations_test.go

chore: remove CreateAnotherUserWithUser (#6068)

2023-02-06 23:48:21 +00:00

organizations.go

feat: Dbauthz is now default, remove out of experimental (#6650)

2023-03-21 09:10:22 -05:00

pagination_internal_test.go

chore: Upgrade to Go 1.19 (#3617)

2022-08-21 22:32:53 +00:00

pagination.go

feat: trace httpapi.{Read,Write} (#4134)

2022-09-21 17:07:00 -05:00

provisionerjobs_internal_test.go

feat: add queue_position and queue_size to provisioner jobs (#8074)

2023-06-20 15:07:18 -05:00

provisionerjobs_test.go

feat: add startup script logs to the ui (#6558)

2023-03-23 14:09:13 -05:00

provisionerjobs.go

feat: add queue_position and queue_size to provisioner jobs (#8074)

2023-06-20 15:07:18 -05:00

roles_test.go

feat: Add initial AuthzQuerier implementation (#5919)

2023-02-14 14:27:06 +00:00

roles.go

feat: embed common client requests into the template html (#8076)

2023-06-18 13:57:27 -05:00

tailnet_test.go

test(agent): fix TestAgent_Metadata/Once flake (#8613)

2023-07-20 18:49:44 +00:00

tailnet.go

feat: support localhost apps running https (#8585)

2023-07-19 17:33:07 -05:00

templates_test.go

fix(coderd): update icon url to the right one (#8718)

2023-07-25 14:06:58 +00:00

templates.go

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

templateversions_test.go

feat(site): display version message (#8435)

2023-07-13 10:36:10 -03:00

templateversions.go

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

updatecheck_test.go

feat: convert entire CLI to clibase (#6491)

2023-03-23 17:42:20 -05:00

updatecheck.go

docs: api root, buildinfo, csp (#5493)

2022-12-22 15:53:14 +01:00

userauth_test.go

feat: add ability for users to convert their password login type to oauth/github login (#8105)

2023-06-30 08:38:48 -04:00

userauth.go

fix: hide experiment CTA from OIDC copy (#8695)

2023-07-24 14:51:28 -05:00

users_test.go

feat!: drop reading other 'user' permission (#8650)

2023-07-26 10:33:48 -04:00

users.go

feat!: drop reading other 'user' permission (#8650)

2023-07-26 10:33:48 -04:00

workspaceagents_test.go

fix!: remove startup logs eof for streaming (#8528)

2023-07-18 09:57:29 -06:00

workspaceagents.go

fix!: remove startup logs eof for streaming (#8528)

2023-07-18 09:57:29 -06:00

workspaceapps_test.go

chore: reduce the log output of skipped tests (#7520)

2023-05-14 19:37:00 -05:00

workspaceapps.go

feat: add session token injection to provisioner (#7461)

2023-05-17 23:29:22 -05:00

workspacebuilds_test.go

feat: enable Terraform debug mode via deployment configuration (#8260)

2023-06-29 15:22:21 +02:00

workspacebuilds.go

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00

workspaceproxies_test.go

feat: add regions endpoint for proxies feature (#7277)

2023-04-25 09:37:52 -05:00

workspaceproxies.go

feat: move proxy settings page to deployment options (#8246)

2023-06-30 11:32:35 -04:00

workspaceresourceauth_test.go

chore: move agent functions from codersdk into agentsdk (#5903)

2023-01-29 15:47:24 -06:00

workspaceresourceauth.go

chore: Rbac errors should be returned, and not hidden behind 404 (#7122)

2023-04-13 13:06:16 -05:00

workspaces_test.go

feat: add deleting_at column to workspaces (#8333)

2023-07-20 22:01:11 -05:00

workspaces.go

chore: join user information to workspace_build and template_version (#8625)

2023-07-25 09:14:38 -04:00