Qiu Jian
37a25c3945
fix: validate policy violation when assign users for oidc IDP
2024-01-27 18:16:56 +08:00
Jian Qiu
21716cefb5
fix: remove mutual dependency of cloudmux on onecloud ( #15621 )
...
Co-authored-by: Qiu Jian <qiujian@yunionyun.com >
2022-12-27 01:21:26 +08:00
Qiu Jian
fbe741f6cd
tag filter for rbac
2021-12-02 07:43:10 +08:00
Qiu Jian
84a9ae95f6
feature: policy support tags
2021-12-02 07:43:10 +08:00
rainzm
cc11aed9e8
feat(db): progressive inspection when determining the required scope
2020-12-29 14:56:01 +08:00
Yousong Zhou
c2bca8ab39
Feature/yousong text ( #7487 )
...
* notify: log with context info
* region: guests: log with context info
* region: hosts: log with context info
* region: misc: remove redundant log
* region: skus: use NewInternalServerError instead of NewGeneralError
* appsrv: dispatcher: preserve text id
* appsrv: dispatcher: remove commented-out code
* cloudcommon: db_dispatcher: note errors that won't be translated
* cloudcommon: db: rbac: preserve text id
* cloudcommon: caller: preserve text id
* treewide: fix fmt string
* region: guest_actions: preserve text id
* region: guest_actions: fix fmt string
* region: usages: fix fmt string
* mcclient: hosts: remove redundant return value
* cloudcommon: fetch: preserve text id
* region: guest_template: preserve text id
* cloudcommon: db: db_dispatcher: preserve text id
* region: guest_actions: preserve text id
* httperrors: add funcs for wrap lang tag into context
* vendor: golang.org/x/text
* httperrors: error with context
* httperrors: HTTPError
* treewide: fix typo
* treewide: use en in source code
* locales: initial version
2020-08-25 15:26:31 +08:00
屈轩
a23a94714c
fix: member user only can get user & domain resource ( #7597 )
...
Co-authored-by: Qu Xuan <quxuan@yunionyun.com >
2020-08-20 20:53:17 +08:00
Zexi Li
9af25a2aa9
cloudcommon: remove unnecessary joint interface ( #7524 )
2020-08-10 16:16:46 +08:00
Qu Xuan
34aa551141
fix: 修复cloudid get权限问题
2020-07-15 11:07:04 +08:00
Qiu Jian
1dfef4dcfa
fix: usage for schetag not accurate
2020-05-21 22:35:38 +08:00
Yousong Zhou
5499f35090
cloudcommon: rbac: fix typo
2020-05-20 11:00:36 +08:00
Qiu Jian
cad0f2c1c5
feature: cloud account share_mode support
2019-11-15 15:09:12 +08:00
yunion-ci-robot
ba4d2e4537
Merge pull request #2473 from swordqiu/hotfix/qj-domain-admin-private-project-network
...
fix: doamin admin cannot access private networks across domain
2019-08-22 09:48:07 +08:00
Qiu Jian
4960b9cebc
fix: doamin admin cannot access private networks across domain
2019-08-22 00:24:32 +08:00
Qiu Jian
f79df042bf
fix: a join update is allowed if one of the joint models is allowed to update
2019-08-21 20:34:37 +08:00
Qiu Jian
4a46cdeb19
fix: cloud-account-usage no data for domain admin
2019-08-17 18:37:53 +08:00
Qiu Jian
9670446a21
fix: 1. zone/region capability containts by domain 2. yunionconf query
...
scope fixes
2019-06-11 01:31:59 +08:00
Jian Qiu
40c4bd2a0b
fix: 1. 403 on zone/capabilities, parameters ( #1097 )
...
* fix: 1. 403 on zone/capabilities, parameters
* fix keystone authenticate error
* fix: endpoint add type console
2019-06-09 00:52:58 +08:00
Qiu Jian
74c6a131a4
fix: numerous incorrect privilege issues
2019-06-06 03:23:03 +08:00
Qiu Jian
292c2a141c
fix: bugs in scope support
2019-06-04 23:27:55 +08:00
Qiu Jian
b7027934db
feature: 3-level policies, system/domain/project
2019-05-31 13:56:02 +08:00
Qiu Jian
5a660987e6
feature: keystone support phase 1
2019-05-17 13:53:45 +08:00
Qiu Jian
2519ef5551
fix: ni usercred cause rbac check panic
2019-03-29 22:08:26 +08:00
Qiu Jian
004d9b6f95
update copyright headers of all source
2019-03-29 14:47:48 +08:00
Zexi Li
fc3b748039
rbac: SharableVirtualResource only allow GET method
2019-02-28 20:59:49 +08:00
Qiu Jian
606802b582
修正：1. attach权限校验总是false 2. 增加climc user
...
default_project_id相关方法
2019-01-09 20:49:26 +08:00
TangBin
a543901e2f
yunionconfig build error fix
2018-12-01 14:52:01 +08:00
Qiu Jian
e42f1a7744
recode
2018-12-01 12:05:41 +08:00
Qiu Jian
2f22ebe0a8
修正rbac，非管理模式下权限有deny, owner, user,
...
guest四个级别，管理模式下，有deny,
allow两个级别。只有非管理模式下，才会应用缺省的权限设置。
2018-11-29 23:13:53 +08:00
Qiu Jian
2734d2f5db
增加user/guest两个权利等级
2018-11-16 01:32:01 +08:00
Qiu Jian
0ed39ff2c9
修正：普通用户无法访问admin权限的资源
2018-11-14 22:30:17 +08:00
Qiu Jian
1a53bba41f
修正：1. rbac禁止所有的创建 2. 增加rbac_debug日志选项
2018-11-13 16:57:36 +08:00
Qiu Jian
1d0ad17e36
fix format
2018-11-08 11:39:48 +08:00
Qiu Jian
388b793490
修正：增加owner级别权限，放置普通用户可以访问系统资源
2018-11-08 01:36:19 +08:00
Qiu Jian
33f546aafd
重构代码，将policy从db中分离出来，代码更干净一些
2018-10-30 00:12:19 +08:00
Qiu Jian
0c06216364
JointModel support
2018-10-27 16:40:41 +08:00
