0977a651df
fix(task): create authorization when using token to create task
2019-02-15 12:11:55 -08:00
8caaff5865
feat(authorizer): add method to verify integrity of permissions
2019-02-15 12:57:57 -05:00
5f524eb92d
Rename all occurences of Macro to Variable
2019-02-14 13:21:57 -08:00
bd8bb5cb52
feat(authorizer): authorize the look up of labels by resource
2019-01-25 11:17:36 +01:00
ddac968127
feat(authorizer): authorization for deletion of label mappings
...
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2019-01-25 11:17:36 +01:00
d8d23a0f77
feat(authorizer): test the authorization of label mappings creation
2019-01-25 11:17:36 +01:00
605fa99ba8
feat(authorizer): authorization of label mappings creation
2019-01-25 11:17:36 +01:00
ead0cb3dcf
feat(authorizer): test labels permissions on create, find, delete, and update operations
...
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2019-01-25 11:17:36 +01:00
a2a1f8641f
feat(authorizer): initial (incomplete) auth for labels v2
2019-01-25 11:17:36 +01:00
6e3e4503c2
feat(influxdb): add urm for scraper
2019-01-23 08:46:32 -08:00
65622b4289
chore(authorizer): refactor order of checks
...
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2019-01-22 19:23:23 +01:00
83e321366e
feat(authorizer): test secrets write permissions
2019-01-22 19:23:23 +01:00
a2b2a6d471
feat(authorizer): test secrets read permissions
...
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2019-01-22 19:23:23 +01:00
d973bdd661
feat(authorizer): secrets auth
2019-01-22 19:23:23 +01:00
cdc9146b78
feat(influxdb): add authorized user resource mappings
...
feat(bolt): add function to find a resources organization id
rename platform to influxdb
Co-authored-by: Leonardo Di Donato <leodidonato@gmail.com>
Co-authored-by: Michael Desa <mjdesa@gmail.com>
fix(bolt): rename FindResoureOrganization to FindResoureOrganizationID
feat(authorizer): add authorized user resource mapping service
Co-authored-by: Leonardo Di Donato <leodidonato@gmail.com>
Co-authored-by: Michael Desa <mjdesa@gmail.com>
feat(influxdb): wire up authorized user resource mapping
Co-authored-by: Leonardo Di Donato <leodidonato@gmail.com>
Co-authored-by: Michael Desa <mjdesa@gmail.com>
fix(authorizer): remove unused field from tests
Co-authored-by: Leonardo Di Donato <leodidonato@gmail.com>
Co-authored-by: Michael Desa <mjdesa@gmail.com>
2019-01-18 14:22:08 -05:00
bd52ed3659
fix(authorizer): allow default source orgID to be in the sources list
2019-01-18 13:14:43 -05:00
04e541bf06
fix(authorizer): do not nead read action while writing to scrapers
...
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2019-01-18 10:01:52 -05:00
f0838e4c71
feat(authorizer): add scraper authorizer
2019-01-18 10:01:51 -05:00
0650aacdf9
fix(authorizer): do not require read action in order to perform a write
2019-01-18 14:05:36 +01:00
de5cc5a2c1
feat(authorizer): source authorizer
2019-01-18 14:05:36 +01:00
24e10a4594
Merge pull request #11261 from influxdata/feat/authorize-auths
...
add authorized authorization service
2019-01-18 07:55:28 -05:00
c9f2a597a4
Merge pull request #11207 from influxdata/feat/authorize-dashboards
...
add dashboard authorization
2019-01-18 07:55:15 -05:00
7c7e25d4b7
test(authorizer): add authorized authorization service
2019-01-17 19:03:13 -05:00
98f67156eb
feat(authorizer): add authorization service
2019-01-17 18:11:59 -05:00
01983553c4
feat(influxdb): add authorization for user actions
2019-01-17 16:05:24 -05:00
556577888b
test(authorizer): add dashboard service tests
2019-01-17 16:04:16 -05:00
328cc6bfa3
fix(authorizer): use embedded service for find in bucket service
2019-01-17 16:04:16 -05:00
ea7e466e07
feat(authorizer): add authorized dashboard service
2019-01-17 16:04:16 -05:00
2f97711703
feat(authorizer): add telegraf authorizer
2019-01-17 11:37:01 -05:00
ae33de4922
feat(authorizer): macro authorizer
...
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2019-01-17 14:50:18 +01:00
59fde4a9de
feat(authorizer): add authorized bucket service
...
feat(http): use authorizer bucket service for API handler.
test(authorizer): add tests for bucket service auth
2019-01-16 15:37:19 -05:00
bfb865cd72
feat(influxdb): authorize org service operations
...
feat(influxdb): add unauthorized error code
feat(testing): export ErrorsEqual method
feat(authorizer): add Authorize method that authorizers permissions
feat(authorizer): add org service that authorizes actions to a wrapped org service
feat(http): use authorized org service in org handler
feat(authorizer): rename Authorize to IsAllowed
2019-01-16 14:41:57 -05:00
Mark Rushakoff
Michael Desa
Alirie Gray
Leonardo Di Donato
Kelvin Wang