opensource/coder
3
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2026-11-06 00:03:36 +08:00
Code Issues Packages Projects Releases Wiki Activity
9,186 Commits 479 Branches 427 Tags
d8561a62fc65eb4429bc7e678a97e7ff2014ef2e
Commit Graph
43 Commits
Author SHA1 Message Date
ケイラ 91a4a98c27 chore: add an unassign action for roles (#16728) 2025-02-27 10:39:06 -07:00
Steven Masley 782214bcd8 chore: move organizatinon sync to runtime configuration (#15431) 
Moves the configuration from environment to database backed, to allow
configuring organization sync at runtime.
 2024-11-08 08:44:14 -06:00
Steven Masley 3894bab038 chore: include error detail for ui error display (#14837) 
Not including an error detail asks the user to check the dev console.
Which is unhelpful in this expected situation
 2024-09-26 11:48:50 -05:00
Steven Masley 45420b95f3 chore: allow removing users from the default org (#14699) 
* chore: allow removing users from the default org

Removed as no longer in experimental
 2024-09-17 10:42:47 -05:00
Steven Masley 71393743dc feat: implement organization role sync (#14649) 
* chore: implement organization and site wide role sync in idpsync
* chore: remove old role sync, insert new idpsync package
 2024-09-16 19:03:25 -05:00
Steven Masley 10c958bba1 chore: implement organization sync and create idpsync package (#14432) 
* chore: implement filters for the organizations query
* chore: implement organization sync and create idpsync package

Organization sync can now be configured to assign users to an org based on oidc claims.
 2024-08-30 11:19:36 -05:00
Steven Masley 0ad5f6067d chore: prevent removing members from the default organization (#14094) 
* chore: prevent removing members from the default organization

Until multi-organizations is released outside an experiment, the
experiment should be backwards compatible.
 2024-08-05 13:48:10 -05:00
Kayla Washburn-Love 38b573857b feat(site): edit organization member roles (#13977) 2024-07-24 11:36:45 -06:00
Kayla Washburn-Love a3f40d5ef8 feat: add members settings page for organizations (#13817) 2024-07-16 12:25:36 -06:00
Steven Masley a588ec5b21 chore: assign user to multiple orgs in coderdtest user create (#13867) 
* chore: coderdtest assign user to multiple orgs on create
 2024-07-10 12:38:48 -05:00
Steven Masley 08e728bcb2 chore: implement organization scoped audit log requests (#13663) 
* chore: add organization_id filter to audit logs
* chore: implement organization scoped audit log requests
 2024-06-26 12:38:46 -05:00
Steven Masley 65b9f9bfd6 chore: audit organization member add/delete/edit (#13620) 
* chore: audit organization member add/removals
 2024-06-24 14:19:32 -05:00
Steven Masley 2ef2f97388 chore: improve error message on adding existing org_member (#13621) 2024-06-20 18:05:11 -05:00
Steven Masley a1db6d809e chore: implement delete organization member (#13589) 
Side effects of removing an organization member will orphan their
user resources. These side effects are not addressed here
 2024-06-20 10:06:37 -05:00
Steven Masley 8e06ad46d0 chore: add organization member api + cli (#13577) 2024-06-20 09:19:24 -05:00
Steven Masley d04959cea8 chore: implement custom role assignment for organization admins (#13570) 
* chore: static role assignment mapping

Until a dynamic approach is created in the database, only org-admins
can assign custom organization roles.
 2024-06-13 15:59:06 -05:00
Steven Masley d0fc81a51c chore: implement cli list organization members (#13555) 
example cli command: 
`coder organization members`
 2024-06-12 10:07:12 -10:00
Steven Masley bbe23edc7d chore: implement api layer for listing organization members (#13546) 2024-06-12 09:52:18 -10:00
Steven Masley 5ccf5084e8 chore: create type for unique role names (#13506) 
* chore: create type for unique role names

Using `string` was confusing when something should be combined with
org context, and when not to. Naming this new name, "RoleIdentifier"
 2024-06-11 08:55:28 -05:00
Steven Masley 8f62311f00 chore: remove organization_id suffix from org_member roles in database (#13473) 
Organization member's table is already scoped to an organization.
Rolename should avoid having the org_id appended.

Wipes all existing organization role assignments, which should not be used anyway.
 2024-06-05 11:25:02 -05:00
Steven Masley afd9d3b35f feat: add api for patching custom org roles (#13357) 
* chore: implement patching custom organization roles
 2024-05-29 09:49:43 -05:00
Steven Masley ad8c314130 chore: implement api for creating custom roles (#13298) 
api endpoint (gated by experiment) to create custom_roles
 2024-05-16 13:47:47 -05:00
Spike Curtis 7c71053eab fix: stop leaking User into API handlers unless authorized 
Fixes an issue where we extracted the `{user}` parameter from the URL and added it to the API Handler context regardless of whether the caller had permission to read the User.
 2023-10-11 09:41:14 +04:00
Kyle Carberry 22e781eced chore: add /v2 to import module path (#9072) 
* chore: add /v2 to import module path

go mod requires semantic versioning with versions greater than 1.x

This was a mechanical update by running:
```
go install github.com/marwan-at-work/mod/cmd/mod@latest
mod upgrade
```

Migrate generated files to import /v2

* Fix gen
 2023-08-18 18:55:43 +00:00
Kyle Carberry 9df9ad4503 feat: embed common client requests into the template html (#8076) 
This should reduce the number of API requests a client makes
when loading the dashboard dramatically!
 2023-06-18 13:57:27 -05:00
Steven Masley 2321160c62 feat: Dbauthz is now default, remove out of experimental (#6650) 
* feat: dbauthz always on, out of experimental
* Add ability to do rbac checks in unit tests
* Remove AuthorizeAllEndpoints
* Remove duplicate rbac checks
 2023-03-21 09:10:22 -05:00
Steven Masley 6fb8aff6d0 feat: Add initial AuthzQuerier implementation (#5919) 
feat: Add initial AuthzQuerier implementation
- Adds package database/dbauthz that adds a database.Store implementation where each method goes through AuthZ checks
- Implements all database.Store methods on AuthzQuerier
- Updates and fixes unit tests where required
- Updates coderd initialization to use AuthzQuerier if codersdk.ExperimentAuthzQuerier is enabled
 2023-02-14 14:27:06 +00:00
Steven Masley b0a16150a3 chore: Implement standard rbac.Subject to be reused everywhere (#5881) 
* chore: Implement standard rbac.Subject to be reused everywhere

An rbac subject is created in multiple spots because of the way we
expand roles, scopes, etc. This difference in use creates a list
of arguments which is unwieldy.

Use of the expander interface lets us conform to a single subject
in every case
 2023-01-26 14:42:54 -06:00
Marcin Tojek 8e9cbdd71b docs: API users (#5620) 
* docs: audit, deploymentconfig, files, parameters

* Swagger comments in workspacebuilds.go

* structs in workspacebuilds.go

* workspaceagents: instance identity

* workspaceagents.go in progress

* workspaceagents.go in progress

* Agents

* workspacebuilds.go

* /workspaces

* templates.go, templateversions.go

* templateversion.go in progress

* cancel

* templateversions

* wip

* Merge

* x-apidocgen

* NullTime hack not needed anymore

* Fix: x-apidocgen

* Members

* Fixes

* Fix

* WIP

* WIP

* Users

* Logout

* User profile

* Status suspend activate

* User roles

* User tokens

* Keys

* SSH key

* All

* Typo

* Fix

* Fix

* Fix: LoginWithPasswordRequest
 2023-01-11 14:08:04 +01:00
Marcin Tojek 84120767a7 docs: API templateversions, templates, members, organizations (#5546) 
* docs: audit, deploymentconfig, files, parameters

* Swagger comments in workspacebuilds.go

* structs in workspacebuilds.go

* workspaceagents: instance identity

* workspaceagents.go in progress

* workspaceagents.go in progress

* Agents

* workspacebuilds.go

* /workspaces

* templates.go, templateversions.go

* templateversion.go in progress

* cancel

* templateversions

* wip

* Merge

* x-apidocgen

* NullTime hack not needed anymore

* Fix: x-apidocgen

* Members

* Fixes

* Fix
 2023-01-11 12:16:09 +01:00
Colin Adler 5de6f86959 feat: trace httpapi.{Read,Write} (#4134) 2022-09-21 17:07:00 -05:00
Dean Sheather 29d804e692 feat: add API key scopes and application_connect scope (#4067) 2022-09-19 17:39:02 +00:00
Steven Masley 0b53b06fc6 chore: Make member role struct match site roles (#3671) 2022-08-24 15:58:57 -04:00
Steven Masley db665e7261 chore: Drop resource_id support in rbac system (#3426) 2022-08-09 18:16:53 +00:00
Jon Ayers 7e9819f2a8 ref: move httpapi.Reponse into codersdk (#2954) 2022-07-12 19:15:02 -05:00
Steven Masley 251316751e feat: Return more 404s vs 403s (#2194) 
* feat: Return more 404s vs 403s
* Return vague 404 in all cases
 2022-06-14 10:14:05 -05:00
Steven Masley c9a4642a12 chore: Update BE http errors to be ui friendly (#1994) 
* chore: More UI friendly errors

Mainly capitlization + messages prefix error
 2022-06-03 21:48:09 +00:00
Steven Masley cc87a0cf6b feat: Implied 'member' roles for site and organization (#1917) 
* feat: Member roles are implied and never exlpicitly added
* Rename "GetAllUserRoles" to "GetAuthorizationRoles"
* feat: Add migration to remove implied roles
* rename user auth role middleware
 2022-06-01 09:07:50 -05:00
Steven Masley 7acb742218 feat: Prevent role changing on yourself. (#1931) 
* feat: Prevent role changing on yourself.

Only allow changing roles on other users. Not much value in self changing
at the moment
 2022-05-31 15:50:38 -05:00
Kyle Carberry 31b819e83f chore: Remove interface from coderd and lift API surface (#1772) 
Abstracting coderd into an interface added misdirection because
the interface was never intended to be fulfilled outside of a single
implementation.

This lifts the abstraction, and attaches all handlers to a root struct
named `*coderd.API`.
 2022-05-26 03:14:08 +00:00
Steven Masley eea8dc6c16 feat: Add rbac to templateversion+orgmember endpoints (#1713) 2022-05-25 11:00:59 -05:00
Colin Adler 97a95f1377 chore: upgrade golangci-lint to v1.46.0 (#1373) 2022-05-10 16:04:23 -05:00
Steven Masley 35211e2190 feat: Add user roles, but do not yet enforce them (#1200) 
* chore: Rework roles to be expandable by name alone
 2022-04-29 09:04:19 -05:00