influxdb/authorizer
Greg f98874566c
fix: allow authorized label service to be called indirectly (#17111)
* fix: allow authorized label service to be called indirectly

17071 exists because pkger loads all service resources as authorized on
start, resulting in them all being authorized when referenced indirectly
(not hit directly via api by consumer). Rather than restructure pkger to
only authorize direct services, this allows proper indirect auth to
labels (the cause of 17071).

* Add orgService to tests

* Add resource types to find orgID from
2020-03-11 10:58:39 -06:00
..
auth.go if(influxdb): updated auth shall return 2019-04-01 12:56:29 -04:00
auth_test.go if(influxdb): updated auth shall return 2019-04-01 12:56:29 -04:00
authorize.go fix(http): refactor document service and fix auth 2020-03-09 20:32:31 +01:00
backup.go feat(storage): implement backup and restore (#16504) 2020-01-21 14:22:45 -08:00
bucket.go fix(tasks): tasks look up system bucket id 2019-10-21 14:48:47 -07:00
bucket_test.go remove org from bucket 2019-04-22 18:39:05 -04:00
check.go feat(influxdb): user disabling 2019-09-23 11:57:16 -07:00
check_test.go feat(influxdb): user disabling 2019-09-23 11:57:16 -07:00
dashboard.go feat(authorizer): add authorized dashboard service 2019-01-17 16:04:16 -05:00
dashboard_test.go test(authorizer): add dashboard service tests 2019-01-17 16:04:16 -05:00
document.go fix(http): refactor document service and fix auth 2020-03-09 20:32:31 +01:00
label.go fix: allow authorized label service to be called indirectly (#17111) 2020-03-11 10:58:39 -06:00
label_test.go fix: allow authorized label service to be called indirectly (#17111) 2020-03-11 10:58:39 -06:00
notification_endpoint.go fix(endpoint): when looking up a endpoint we should allow org only lookup (#16050) 2019-11-27 09:09:36 -07:00
notification_endpoint_test.go chore(http): refactor http layer to be able to encode/decode influxdb.ID's safely 2019-12-13 09:46:01 -08:00
notification_rule.go feat(influxdb): user disabling 2019-09-23 11:57:16 -07:00
notification_rule_test.go feat(influxdb): user disabling 2019-09-23 11:57:16 -07:00
org.go feat(influxdb): authorize org service operations 2019-01-16 14:41:57 -05:00
org_test.go feat(authorizer): add authorized bucket service 2019-01-16 15:37:19 -05:00
password.go chore: refactor password service to provide userID instead of name 2019-11-20 09:16:31 -08:00
password_test.go chore: refactor password service to provide userID instead of name 2019-11-20 09:16:31 -08:00
scraper.go check write bucket permission when creating a scraper 2019-05-15 21:44:23 +08:00
scraper_test.go check write bucket permission when creating a scraper 2019-05-15 21:44:23 +08:00
secret.go Fix typos in miscellaneous packages 2019-04-17 13:30:22 -07:00
secret_test.go chore(authorizer): refactor order of checks 2019-01-22 19:23:23 +01:00
source.go chore(bolt): nuke crufty bolt db service 2019-12-30 11:19:48 -08:00
source_test.go feat(authorizer): source authorizer 2019-01-18 14:05:36 +01:00
task.go refactor(task/backend): move the task/backend constants to the global package (#17133) 2020-03-06 16:19:32 -06:00
task_test.go refactor(task/backend): move the task/backend constants to the global package (#17133) 2020-03-06 16:19:32 -06:00
telegraf.go fix(influxdb): rename telegraf orgID 2019-06-03 16:20:53 -04:00
telegraf_test.go fix(influxdb): rename telegraf orgID 2019-06-03 16:20:53 -04:00
urm.go feat(influxdb): add authorized user resource mappings 2019-01-18 14:22:08 -05:00
urm_test.go feat(influxdb): add authorized user resource mappings 2019-01-18 14:22:08 -05:00
user.go feat(influxdb): add authorization for user actions 2019-01-17 16:05:24 -05:00
user_test.go feat(influxdb): add authorization for user actions 2019-01-17 16:05:24 -05:00
util_test.go feat(authorizer): add authorized bucket service 2019-01-16 15:37:19 -05:00
variable.go Rename all occurences of Macro to Variable 2019-02-14 13:21:57 -08:00
variable_test.go feat(influxd): Tracing refactor (#12318) 2019-03-04 11:48:11 -08:00