Akita Noek
c7234f42c7
Give SU's access to all projects to protect against unreachable orphans
2016-03-21 22:28:05 -04:00
Akita Noek
7ca516da0b
Misc fixes for old projects tests
2016-03-21 22:17:16 -04:00
Akita Noek
b111484b89
old users tests: deprecated_userse -> member_role.members changes
2016-03-21 22:16:54 -04:00
Akita Noek
8c403cf77f
Fixed SU project access
2016-03-21 22:15:08 -04:00
Akita Noek
173ae3b2db
Fixed deprecated_teams relation, and typos
2016-03-21 22:14:39 -04:00
Akita Noek
54cf4b6e02
Grant project access to teams through role parenting
2016-03-21 22:13:12 -04:00
Akita Noek
e4a1a9c3bf
Fixed user/:id/projects after ripping out Team.users
2016-03-21 22:09:55 -04:00
Akita Noek
01e16f6722
Fixed user/:id/teams endpoint after ripping out Team.users
2016-03-21 22:09:18 -04:00
Akita Noek
6d62fbc541
Add test for most recent rbac m2m binding fail
2016-03-21 21:09:58 -04:00
Akita Noek
ec851492d6
Fixed Role m2m binding so it even works all the time
2016-03-21 21:09:22 -04:00
Akita Noek
4bb2f27fe5
Prefixed User.organizations and User.admin_of_organizations with deprecated_
2016-03-21 15:43:58 -04:00
Akita Noek
91690a0eb7
Removed deprecated use of admin_of_organizations
2016-03-21 15:43:21 -04:00
Akita Noek
b46bdef732
Ported old/organizations.py tests to new rbac system
2016-03-21 15:35:08 -04:00
Akita Noek
a5c355d753
Updated UserAccess to reflect new visibility requirements (and work)
2016-03-21 15:08:10 -04:00
Akita Noek
e4948f210f
Fixed up migrations
2016-03-18 16:31:53 -04:00
Akita Noek
92df6b0fb2
Merge branch 'devel' into rbac
2016-03-18 16:26:45 -04:00
Akita Noek
8addccd434
Renamed migrations to be a little more descriptive
...
Mainly for sanity when merging migrations into long running branches..
but nice anyways I think
2016-03-18 16:17:58 -04:00
Akita Noek
5741b47c54
Merge remote-tracking branch 'ansible/devel' into merge-devel
2016-03-18 15:40:13 -04:00
Akita Noek
4fac1e96f4
Test that helps test the implemenation of role auto-reparenting
2016-03-18 15:11:13 -04:00
Akita Noek
23f0286669
Refactored ImplicitRoleField to be faster and avoid some bad looping cases
...
The role creation logic was a bit too lazy and caused some looping when
using other roles as parent roles. This refactor does all role
creation for a single model instance up front together, which helps
avoid these situations as well as eliminates some extra db updates and
inserts that would happen the old way.
2016-03-18 15:10:08 -04:00
Akita Noek
13dd27ac52
Merge branch 'rbac' of github.com:ansible/ansible-tower into rbac
2016-03-18 11:17:04 -04:00
Chris Meyers
0f99dbe1d2
fixes MONGO_HOST not found error
2016-03-18 10:56:00 -04:00
Wayne Witzel III
766190fb80
Use getattrd instead of reduce
2016-03-17 16:27:47 -04:00
Wayne Witzel III
6d249f38a7
Fix credential assertions and rename migration helpers
2016-03-17 15:41:46 -04:00
Akita Noek
ccfb73766c
Code de-dup
2016-03-17 13:25:04 -04:00
Wayne Witzel III
74e2c440a5
Rename credential migration helpers
2016-03-17 11:37:59 -04:00
Wayne Witzel III
b59e960b46
Credential migration and initial tests
2016-03-17 11:21:10 -04:00
kensible
cc98c6ce3c
Merge pull request #1264 from kensible/688-orgCards-counts
...
688 org cards counts
2016-03-17 10:48:50 -04:00
Akita Noek
d997e93aa1
Removed attach/detach capabilities from organizations/:id/projects endpoint as it's no longer applicable
2016-03-17 10:07:57 -04:00
Ken Hoes
7443487b00
Removed unused routes
2016-03-17 09:18:01 -04:00
Akita Noek
1827de48af
more deprecated_users -> member_role.members fixes in tests
2016-03-17 08:56:02 -04:00
Akita Noek
ecf4d2872a
Fixes for schedule tests
2016-03-17 08:55:32 -04:00
Akita Noek
3ca016faaf
Revert ScheduleAccess can_* methods to route through other *Access classes
...
This takes care of all the polymorphic cases, which we'd have to
otherwise handle
2016-03-17 08:53:40 -04:00
Akita Noek
c0245317b3
flake8
2016-03-16 16:48:07 -04:00
Akita Noek
a1202a20ab
Added .all()'s needed after active flag filter removal
2016-03-16 16:47:35 -04:00
Akita Noek
8fb9ef37c2
Permission -> RBAC fixes in our inventory tests
2016-03-16 16:43:54 -04:00
Akita Noek
293fd73fe6
Missing .distinct()
2016-03-16 16:43:31 -04:00
Akita Noek
cf3c988330
Missing import
2016-03-16 16:43:13 -04:00
Akita Noek
e770a1f225
Removed unused dashboard inventory graph, doubly useless now that active flag is gone
2016-03-16 15:56:23 -04:00
Akita Noek
d9c80dade6
Active flag removal fallout fixes
2016-03-16 15:55:24 -04:00
Akita Noek
098ff82e7c
Updated inventory tests to use new rbac system
2016-03-16 15:07:16 -04:00
Akita Noek
1face5aa28
Dropped unused ResourceMixin from InventorySource
2016-03-16 14:19:31 -04:00
Akita Noek
99d3481976
Ported ad_hoc.py tests to use new RBAC system
2016-03-16 13:46:48 -04:00
Akita Noek
9e79cf733f
Added missing permission grants on a Inventory updater and executor roles
2016-03-16 13:46:15 -04:00
Ken Hoes
8ca3a6b2bf
Added counts to organizations listing
2016-03-16 13:23:37 -04:00
Akita Noek
55564cc2b4
Fix Credential admin_role to add itself under the user.admin_role when it exists
2016-03-16 13:16:26 -04:00
Matthew Jones
526a6ec7dd
Remove unneeded fetch for r/o fields
2016-03-16 13:12:13 -04:00
Matthew Jones
45f95bf2b2
Disallow related elements to be treated as choices
...
DRF will try to resolve potential candidates into the OPTIONS endpoint.
This is mainly to support their POST field in the browseable API. We
don't need this and it can yield some expensive queries so we bypass
generating choices for any RelatedField fields
2016-03-16 13:11:05 -04:00
Akita Noek
46cb51ba2f
typo fix
2016-03-16 11:56:58 -04:00
Ken Hoes
e044617284
Merge branch '1259-organizations-modules' into 688-orgCards-counts
2016-03-16 11:55:21 -04:00