 Qiu Jian
|
128f895c5c
|
fix(keystone): role_assignment effective list ignore groups without user
|
2021-04-05 17:21:21 +08:00 |
|
|
Qiu Jian
|
0c57a713e5
|
fix: adjust primary key length when sqlchemy utf8 default to utf8mb4
|
2021-04-02 15:06:19 +08:00 |
|
|
Qiu Jian
|
e6868d5d0f
|
fix(keystone): allow joint projects across domains by default
|
2021-03-19 00:00:22 +08:00 |
|
|
Qiu Jian
|
601112dd7f
|
fix(keystone): ensure comparing id with non-utf8 string
|
2021-02-25 02:29:30 +08:00 |
|
|
rainzm
|
399bce619a
|
feat(keystone): support filter 'project_domain_id' in role_assignments
|
2021-02-18 11:45:15 +08:00 |
|
|
rainzm
|
0de209502f
|
fix(notify): get the receiver corresponding to the role correctly
|
2021-02-18 11:45:15 +08:00 |
|
|
Jian QiuandQiu Jian
|
058a0a0729
|
fix(keystone): policy name duplication (#10200)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
|
2021-02-14 19:14:14 +08:00 |
|
|
Jian QiuandQiu Jian
|
e43bea673c
|
fix(keystone): hide system scope policies in domain scope view (#10195)
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
|
2021-02-08 12:17:01 -03:00 |
|
|
Zexi Li
|
ed23e6acb7
|
Merge pull request #10174 from swordqiu/automated-cherry-pick-of-#10173-upstream-release-3.7
Automated cherry pick of #10173: fix(keystone): cas sso may create new project whenever user login
|
2021-02-06 10:35:52 +08:00 |
|
|
Qiu Jian
|
34e5a36b2c
|
fix(keystone): cas sso may create new project whenever user login
|
2021-02-06 03:20:37 +08:00 |
|
|
Qiu Jian
|
1a24034c64
|
fix(keystone): idp filter by sso_domain returns domain's idp only
|
2021-02-06 02:56:31 +08:00 |
|
|
Qiu Jian
|
9342987aa3
|
fix(keystone): SSO created user name may be duplicated
|
2021-01-28 23:38:58 +08:00 |
|
|
rainzm
|
46a1312336
|
feat(keystone): more specific error return during authentication
add error class UserNotFound, UserLocked, UserDisabled and WrongPassword
|
2021-01-27 19:58:42 +08:00 |
|
|
Qiu Jian
|
bc0a4a7b6f
|
fix(keystone): user create without password can login with any password
|
2021-01-23 23:50:59 +08:00 |
|
|
Qiu Jian
|
6428ca9a15
|
fix(keystone): allow delete sso imported non-local user
allow delete SSO imported non-local users
|
2021-01-21 23:50:49 +08:00 |
|
|
Zexi Li
|
3f9982ecd1
|
Merge pull request #9949 from rainzm/automated-cherry-pick-of-#9948-upstream-release-3.7
Automated cherry pick of #9948: feat(keystone,apigateway): return a readable message when the user is locked or disabled
|
2021-01-20 20:05:58 +08:00 |
|
|
Qiu Jian
|
db7a921785
|
fix(keystone): allow filter identity_providers with name of ssoDomain
allow filter identity_providers with name of ssoDomain
|
2021-01-20 01:05:57 +08:00 |
|
|
rainzm
|
9c4fd94d7a
|
feat(keystone,apigateway): return a readable message when the user is locked or disabled
|
2021-01-19 17:33:24 +08:00 |
|
|
rainzm
|
9c630dc313
|
fix(keystone): clear failed auth when enable user
|
2021-01-14 18:25:51 +08:00 |
|
|
rainzm
|
f41c840d85
|
feat(keystone): support alertNotify when abnormal login occur
|
2021-01-13 20:01:13 +08:00 |
|
|
rainzm
|
c22f221898
|
feat(keystone): add GetDefaultAdminSession
|
2021-01-13 20:01:12 +08:00 |
|
|
rainzm
|
afbb4a0470
|
feat(keystone): support projectDomainId in SAssignmentManager.FetchAll
|
2021-01-13 20:01:12 +08:00 |
|
|
Yousong Zhou
|
a012496cbb
|
keystone: reword error messages
|
2021-01-11 17:50:12 +08:00 |
|
|
Qiu Jian
|
7c84554587
|
fix(keystone): add i18n description for policy and role
Add i18n support for descriptions of system policy and role
|
2020-12-23 23:34:21 +08:00 |
|
|
Qiu Jian
|
234c37c490
|
fix(keystone): ignore deleted policies when matching policies
ignore deleted policies when matching policies
|
2020-12-20 14:12:59 +08:00 |
|
|
Zexi Li
|
0ce19160d0
|
Merge pull request #9501 from swordqiu/feature/qj-user-add-lang-attribute
feature(keystone): user add language attribute
|
2020-12-19 20:05:21 +08:00 |
|
|
Qiu Jian
|
5cf5576e09
|
feature(keystone): user add language attribute
User add language attribute, notify and alarm will use this attribute to
send message in proper language
|
2020-12-19 09:18:17 +08:00 |
|
|
Qiu Jian
|
80229fa1e0
|
fix(keystone): always upload&refresh service config whenever service restart
Always upload&refresh service config whenever service restart
|
2020-12-19 00:49:32 +08:00 |
|
|
Qiu Jian
|
a0350d0537
|
fix(keystone): update user attributes whenever user login
update user attribtues whenever user login
|
2020-12-14 18:15:48 +08:00 |
|
|
Zexi Li
|
95d67b040b
|
Merge pull request #9361 from swordqiu/hotfix/qj-domain-unlink-action
fix(keystone): allow unlink a domain from an IDP
|
2020-12-12 00:16:22 +08:00 |
|
|
Qiu Jian
|
1d7b7057a7
|
fix(keystone): ignore service config update without changes
ignore service config updates that no changes happen. prevent service
config change infomrer messages from flushing the log.
|
2020-12-11 22:10:49 +08:00 |
|
|
Qiu Jian
|
076fa5498a
|
fix(keystone): allow unlink a domain from an IDP
allow unlink a domain from an IDP
|
2020-12-11 21:50:15 +08:00 |
|
|
Qiu Jian
|
0a7513cce4
|
fix(cloudcommon): disable quota check by default
1. add enable_quota_check common option
2. disable quota check by default
3. specify scope of quota limit in OutOfQuota error message
|
2020-12-10 01:19:06 +08:00 |
|
|
Qiu Jian
|
4411c4e5bb
|
fix(keystone): rolepolicies list panic if filter by domain scope
rolepolicies list panic if filter by scope=domain
|
2020-12-08 03:12:42 +08:00 |
|
|
Qiu Jian
|
ef648b5b87
|
fix(keystone): not allow to disable sql driver
not allow to disable default SQL identity_provider driver
|
2020-12-02 16:39:23 +08:00 |
|
|
Qiu Jian
|
b27b086cce
|
feat(keystone): filter domain/user by idp_entity_id
filter domain/user by idp_entity_id
|
2020-11-23 12:19:37 +08:00 |
|
|
Qiu Jian
|
2a1b5f8a75
|
fix: mcclient panic when keystone init empty service catalog
|
2020-11-14 00:17:18 +08:00 |
|
|
Qiu Jian
|
f10267b0fe
|
feature: allow join project across domain
|
2020-11-12 19:40:23 +08:00 |
|
|
Qiu Jian
|
f1be0adf6e
|
allow delete role-policy-binding
|
2020-11-10 20:30:27 +08:00 |
|
|
Qiu Jian
|
d66ee1fd4b
|
fix: role-set-policies support update only operation
|
2020-11-10 19:05:55 +08:00 |
|
|
Qiu Jian
|
178e1ab8fc
|
feature: auto create domain for sso idp
|
2020-11-02 13:59:50 +08:00 |
|
|
Qiu Jian
|
354bcd9f07
|
fix: save service config changes may send invalid action log
|
2020-10-31 18:57:52 +08:00 |
|
|
Qiu Jian
|
2d39cb4cb0
|
feature: policy group support
|
2020-10-24 22:46:46 +08:00 |
|
|
wanyaoqi
|
128ec17741
|
fix informer backend
|
2020-10-20 17:45:25 +08:00 |
|
|
wanyaoqi
|
917a62c142
|
remove try set informer backend
|
2020-10-19 21:32:26 +08:00 |
|
|
wanyaoqi
|
5f5090038b
|
keystone init etcd backend
|
2020-10-19 20:03:02 +08:00 |
|
|
Qiu Jian
|
d681a148df
|
fix: reduce change config logs
|
2020-10-19 11:51:04 +08:00 |
|
|
Zexi Li
|
f0cc1d3d1a
|
stringutils2: add RemoveUtf8Strings func
|
2020-10-15 19:33:18 +08:00 |
|
|
Qiu Jian
|
b2add97a0d
|
fix: filter role assignments by project domains id or name
|
2020-10-15 13:01:00 +08:00 |
|
|
Qiu Jian
|
6cbd811810
|
fix: role assignment filter by users not working for effective users in
groups
|
2020-09-23 17:53:58 +08:00 |
|