opensource/cloudpods
3
0
Fork 0
mirror of https://github.com/yunionio/cloudpods.git synced 2026-11-04 15:01:59 +08:00
Code Issues Packages Projects Releases Wiki Activity
9,767 Commits 30 Branches 714 Tags
98fcd1df0f1158e5184a0a33bfda170bae76f7e5
Commit Graph
59 Commits
Author SHA1 Message Date
Qiu Jian e915d7d55b fix: policy fetcher not retry after initial failure 2020-03-17 18:27:17 +08:00
Qiu Jian 2c7c817ddc fix: string2scope ignore user scope 2019-10-11 22:06:05 +08:00
Qiu Jian 5a024b7cfe fix: reduce policy sync worker queue size 2019-09-27 23:00:13 +08:00
Qiu Jian a177f8c2af fix: use policy match weight to override less specific policy 2019-08-23 21:14:47 +08:00
Qiu Jian c18359def4 fix: role assignments list should include matched policies 2019-07-25 02:26:39 +08:00
Qiu Jian 2dd12cc14f fix: misc 2019-06-18 10:32:43 +08:00
Qiu Jian 74c6a131a4 fix: numerous incorrect privilege issues 2019-06-06 03:23:03 +08:00
Qiu Jian 292c2a141c fix: bugs in scope support 2019-06-04 23:27:55 +08:00
Qiu Jian a6207a8ac7 hotfix: support scope list filter, resolve filter conflict 2019-06-04 23:27:55 +08:00
Jian Qiu 72c13b8e39 3level priviliges bufixes 20190603 (#1036) 2019-06-03 12:30:58 +08:00
Jian Qiu 81b9cac556 fix: misc 3level priviliges bugfixes (#1026) 
* fix: misc 3level priviliges bugfixes

* misc bugfixes

* misc bugfixes
 2019-06-02 08:05:11 +08:00
Jian Qiu bff3ba9b16 fix: keystone fernet setup bugs and other bugs (#1022) 2019-06-01 17:31:20 +08:00
Qiu Jian b7027934db feature: 3-level policies, system/domain/project 2019-05-31 13:56:02 +08:00
Qiu Jian 2efc5e641e fix: add keystone initialization procedures 2019-05-17 13:54:29 +08:00
Qiu Jian 5a660987e6 feature: keystone support phase 1 2019-05-17 13:53:45 +08:00
Jian Qiu 0a0a44b48d fix: anonymous user may have admin priviliges (#124) 2019-03-31 15:24:41 +08:00
Qiu Jian fefdb706f3 fix: the default policy for actions not matching any rule defaults to allow 2019-03-29 20:45:38 +08:00
Qiu Jian 004d9b6f95 update copyright headers of all source 2019-03-29 14:47:48 +08:00
Qiu Jian 78faed91a4 fix: SyncOnce should invalidate policy cache 2019-03-21 11:29:30 +08:00
Qiu Jian 9d966e9959 minor updates 2019-03-21 01:06:33 +08:00
Qiu Jian 06ae94ebe3 fix: simplify rbac policy condition to match projects and roles 2019-03-21 01:03:51 +08:00
Yousong Zhou 07f98779ad treewide: s/HasSystemAdminPrivelege/HasSystemAdminPrivilege/g 2019-03-12 03:39:20 +00:00
Qiu Jian 4c6f196ec5 Merge branch 'release/2.6.0' of ssh://git.yunion.io/~qiujian/onecloud into feature/qj-image-p2p-distribution 
Conflicts:
	pkg/appsrv/appsrv.go
	pkg/cloudcommon/policy/defaults.go
	pkg/util/sysutils/sysutils.go
 2019-02-15 22:46:01 +08:00
Qiu Jian eaeb41a2d7 fix misc logger bugs 2019-02-12 14:50:58 +08:00
Qiu Jian 0e3f2e160c temp commit 2019-01-30 21:06:48 +08:00
Qiu Jian a99ded14e3 minor fixes 2018-12-27 00:07:15 +08:00
Qiu Jian f489e67af6 修正：rbac每次获取policy失败后，会time.After两次回调 2018-12-26 18:50:31 +08:00
Qiu Jian c7ac542061 在2.4把owner_allow的权限表示从allow改回owner 2018-12-26 11:39:58 +08:00
Qiu Jian 957bc822ac 修正：可以通过SyncOnce方法强制刷新policy缓存 2018-12-25 20:13:31 +08:00
邱剑 f10b31c0bd Merge pull request #834 in YUNIONIO/onecloud from ~WANYAOQI/onecloud:feature/wyq/client-session-add-ctx to release/2.4.0 
* commit '742a67b0f847813c5fa7245514330f44bbef0486':
  client session add context
 2018-12-25 15:25:52 +08:00
wanyaoqi 742a67b0f8 client session add context 2018-12-25 13:33:33 +08:00
Qiu Jian de2ecb6be7 修正：policy默认采用json解码，只有climc才采用yaml 2018-12-24 23:31:24 +08:00
Qiu Jian 7e423bc882 修正：由后端来确定一个资源是否是管理资源（无owner的资源） 2018-12-24 12:16:13 +08:00
Qiu Jian 3f758e193a minor fixes 2018-12-22 00:17:29 +08:00
Qiu Jian cdec7fa2b7 改进： 1. policy explain增加name参数，允许针对一个policy进行策略测试。2. 
将owner，admin统一为allow
 2018-12-21 22:02:04 +08:00
Qiu Jian c33fb7e283 updates 2018-12-10 20:05:20 +08:00
Qiu Jian dd15c8fdbe minor fixes 2018-12-10 20:03:06 +08:00
Qiu Jian fc925e38ce Merge branch 'release/2.4.0' of ssh://git.yunion.io/~qiujian/onecloud into hotfix/qj-policy-cache 2018-12-10 15:36:18 +08:00
Qiu Jian da1efdaabf 增加policy缓存，降低日志量和计算量 2018-12-10 15:35:15 +08:00
Qiu Jian 669081f7f3 Merge branch 'release/2.4.0' of ssh://git.yunion.io/~qiujian/onecloud into feature/qj-vm-resource-pooling 2018-12-05 01:14:45 +08:00
Qiu Jian 3e87c17e72 support prepaid server create and renew 2018-12-05 00:40:15 +08:00
Yousong Zhou 801eabbe83 policy: 同步时日志调整 2018-12-03 13:44:45 +00:00
Qiu Jian b4fcb63b64 Remove SInfrastructureManager & SInfrasture 2018-12-01 01:05:13 +08:00
Qiu Jian bc02b3b433 1. 
取消userCred.IsSystemAdmin()，在使用policy的应用中，通过userCred.IsAdminAllow判断是否是管理员且具备相应的权限。获取token时，需要传入policy.FilterPolicyCredential，将普通userCred转换成支持rbac的userCred
2. 在应用启动时候，必须设置 SetServiceType，否则退出
 2018-11-30 23:00:11 +08:00
Qiu Jian 2f22ebe0a8 修正rbac，非管理模式下权限有deny, owner, user, 
guest四个级别，管理模式下，有deny,
allow两个级别。只有非管理模式下，才会应用缺省的权限设置。
 2018-11-29 23:13:53 +08:00
Qiu Jian 16f06ff081 增加 quotas 和 usages 的缺省权限 2018-11-27 15:04:18 +08:00
Qiu Jian 855c115b45 为yunonagent的通知增加缺省策略，避免前端报权限不足错误 2018-11-26 01:53:59 +08:00
Qiu Jian 2ed294eaa8 RBAC返回值同时携带资源信息 2018-11-22 12:02:21 +08:00
Qiu Jian f1b9ea55e7 修正：前端check compute servers perform start权限报out of index错误 2018-11-20 17:35:58 +08:00
Qiu Jian 4034ee517e make fmt 2018-11-16 01:43:01 +08:00