Greg
1806d6c298
chore: tidy prior to kv refactor ( #5342 )
...
* Start cleaning up/reviewing for kv refactor
* Remove dependency on graceful http layer
* Remove deprecated cli option --new-sources
* Run gofmt and remove dep related files
* Update non-influx deps
* Update kapacitor dep
* Compile regexp's once
* Remove un-needed struct members
* Remove unused integrations code
2020-01-09 08:49:42 -07:00
Jared Scheib
de90bfedef
Test for existing superadmin user in Principal auth0 group
2018-03-23 16:58:09 -07:00
Jared Scheib
f3b9f6777a
Update existing user's superAdmin status in bolt if in Principal auth0 group
2018-03-23 16:53:08 -07:00
Jared Scheib
f1cadf6191
Add server test for Chronograf not private & user is in auth0 superadmin group
2018-03-23 16:26:20 -07:00
Jared Scheib
c449d34ec1
Add expected defaultRole to test data organization & currentOrganization
2018-03-23 15:54:46 -07:00
Jared Scheib
dd2c600c78
Update 'private' language to make consistent with current behavior of app
2018-03-23 15:45:11 -07:00
Jared Scheib
3dbab1a9b5
Remove extraneous fmt.Print statements
2018-03-23 15:03:01 -07:00
Jared Scheib
50849b11ef
Extend test data with case where user has multiple Principal Groups
2018-03-23 15:00:09 -07:00
Michael Desa
0cde581538
Add tests for mapProviderToSuperAdmin
2018-03-23 16:12:18 -04:00
Luke Morris
c136a2f5f0
Remove Public; Improve Tab Names
2018-02-09 16:00:27 -08:00
Luke Morris
67ac6a5a2f
Merge branch 'master' into feature/mappings
2018-02-09 11:42:07 -08:00
Iris Scholten
3c3e524b46
Group=>ProviderOrganization; organization=>organiztionId; fix pointer bug
2018-02-06 18:33:27 -08:00
Michael Desa
8b60388d81
Add correct implementation of mappings
2018-02-05 14:54:39 -05:00
Michael Desa
2d7828b602
Nest user routes under organization
...
Add global user routes
2018-01-16 16:45:58 -05:00
Michael Desa
0b89623db8
Apply mapping to user in /me
2018-01-11 16:10:27 -05:00
Michael Desa
de61afc850
Fix mappings on me response
2018-01-10 16:34:04 -05:00
Michael Desa
2eb68a3b36
Add mappings to organizations
...
Add links to organization response on me
2018-01-10 15:56:13 -05:00
Michael Desa
d8d20547ab
Change Organization ID to string from uint64
2017-12-19 10:13:43 -08:00
Jared Scheib
456488f0ac
Merge pull request #2355 from influxdata/multitenancy_all_users_superadmin_toggle
...
UI Toggle & API for SuperAdminFirstUserOnly server config
2017-12-14 10:54:18 -08:00
Michael Desa
392594539b
Add SuperAdmin to default org, even if private
...
Add user to default org if org is public
2017-12-13 17:38:57 -08:00
Michael Desa
2b38918a44
Prevent users joining default org if private
2017-12-13 16:59:02 -08:00
Jared Scheib
f23075cbc4
Rename superAdminFirstUserOnly to superAdminNewUsers & flip default logic accordingly
...
Signed-off-by: Michael de Sa <mjdesa@gmail.com>
2017-12-13 14:49:49 -08:00
Michael Desa
da67f958ae
Remove SuperAdminFirstUserOnly CLI flag
...
Wire up boltdb config store
2017-12-13 11:55:36 -08:00
Michael Desa
9fd656d4c9
Prevent user joining private default org
...
Previously, if an organization was private and a user was removed from
the default organization, then they would be re-added. This behavior was
so left over from when we thought of the default organization as the
place where all users would exist. This PR removes that behavior.
There is one piece of odd behavior where a user's "current organization"
will be the default organization, but they will have no role in the
default organization.
2017-12-12 13:15:53 -08:00
Jared Scheib
f8920cf39b
Merge branch 'multitenancy' into multitenancy_reset_current_org
2017-11-30 19:07:40 -08:00
Michael Desa
6feba85807
Change NewUsersNotSuperAdmin to SuperAdminFirstUserOnly
2017-11-30 15:01:52 -05:00
Michael Desa
86b9c0d985
Make first user SuperAdmin
2017-11-30 12:56:13 -05:00
Michael Desa
cf82990623
Return HTTP Status 403 if org not found in /me
...
Fix returning non-standard status from AuthorizedUser
2017-11-21 18:53:42 -05:00
Michael de Sa
65bc529831
Fix tests broken in 96a362cb
...
Signed-off-by: Jared Scheib <jared.scheib@gmail.com>
2017-11-13 23:10:26 -08:00
Michael Desa
011b0bfb73
Add option to specify users are create as super admin
2017-11-13 20:44:50 -08:00
Michael Desa
5b64cb4dc3
Use default organization default role in me
...
Forbid users from application if they have no roles and were not
explicitly added in private organization
2017-11-13 19:28:15 -08:00
Luke Morris
b3d0d6eeee
Address PR feedback.
2017-11-13 18:08:50 -08:00
Luke Morris
b543e64ef1
Make Public values explicit
2017-11-13 12:15:53 -08:00
Luke Morris
b731481fdc
Sew up failing tests
2017-11-13 11:47:34 -08:00
Luke Morris
65ae474a5c
Clear test noise
2017-11-10 18:45:25 -08:00
Luke Morris
31277c432c
Rename whitelistOnly => public
2017-11-10 18:23:41 -08:00
Michael Desa
d53fcea236
Change MeOrganization to UpdateMe
2017-11-10 16:17:46 -05:00
Michael Desa
173d1f2d71
Check WhitelistOnly setting on default org in Me
...
Set DefaultOrganizationWhitelistOnly to false
Set DefaultOrganizationRole on new user in Me
2017-11-10 16:15:29 -05:00
Michael Desa
39910a08af
Sort users organizations on me response by org ID
2017-11-10 11:09:16 -05:00
Michael Desa
4e46b4b2c7
Differentiate between SuperAdminContext and ServerContext
...
Previously, the server just hijacked the super admin context in order to
get raw access to the underlying data stores, this introduces a way to
specify the it is explicitly the server making the request and no longer
hijack the super admin context.
This also adds test coverage to ensure that the correct values are being
set on context in the AuthorizedUser method.
2017-11-10 11:09:16 -05:00
Michael Desa
859d94ab15
Move user roles and role names to roles package
2017-11-06 11:27:13 -05:00
Michael Desa
66c779c193
Remove DefaultOrganization Name in tests mock store
2017-11-06 10:17:17 -05:00
Michael Desa
3370774e8f
Add default org logic to OrganizationsStore
...
Update resource handlers to appropriate consume default organization IDs
2017-11-06 10:14:12 -05:00
Michael Desa
3ddd253d68
Grant user role in default org if added via API
...
When users are created via the API they are only given roles in orgs
that are explicitly set. Additionally the roles must be roles that
belong to the current organization (unless they are a super admin).
This leads to a situation where a user may not be a part of the default
organization. If this is the case, we detect it when the user hits /me
and add the user to the default org.
2017-11-06 09:46:00 -05:00
Michael Desa
81e0bf06dc
Fix me tests with proper IDs
2017-11-03 09:47:54 -04:00
Michael Desa
6f72d72fca
Fix over-stringification of organization on roles
2017-11-02 21:52:30 -04:00
Michael Desa
da1fa2141b
Add CurrentOrganization & Organizations to me resp
...
Remove CurrentOrganization from chronograf.User
2017-11-02 11:59:53 -04:00
Michael Desa
24c99a761b
Change OrganizationID to Organization in Me req
2017-11-01 10:37:32 -04:00
Michael Desa
72422803c4
Add superAdmin to users CRUD
2017-11-01 09:12:19 -04:00
Michael Desa
5f63e2738a
Refactor data stores into a common interface
2017-10-31 16:41:17 -04:00