Steven Masley 1d1070d051 chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348) ...

The file cache was caching the `Unauthorized` errors if a user without
the right perms opened the file first. So all future opens would fail.

Now the cache always opens with a subject that can read files. And authz
is checked on the Acquire per user.

2025-06-16 13:40:45 +00:00

..

agentapi

test: ensure the return value of MockAuditor.Contains is checked (#18319)

2025-06-11 17:16:18 +10:00

agentmetrics

…

ai

…

apidoc

chore: remove dynamic-parameters experiment (#18290)

2025-06-12 12:15:05 -04:00

apikey

…

appearance

…

audit

…

autobuild

chore(coderd/autobuild): use dbtestutil.WillUsePostgres instead of os.Getenv in test (#18145)

2025-06-02 13:58:07 +02:00

awsidentity

…

azureidentity

…

coderdtest

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

cryptokeys

chore: update to coder/quartz v0.2.0 (#18007)

2025-05-27 16:05:03 +04:00

database

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

devtunnel

…

entitlements

…

externalauth

chore(coderd/externalauth): remove dbmem from tests (#18147)

2025-06-02 14:42:18 +02:00

files

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

gitsshkey

…

healthcheck

…

httpapi

chore: avoid depending on rbac in slim builds (#17959)

2025-05-22 19:48:23 +10:00

httpmw

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

identityprovider

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

idpsync

chore(coderd/idpsync): run all tests with postgres (#18149)

2025-06-02 14:07:31 +02:00

jobreaper

feat: cancel stuck pending jobs (#17803)

2025-05-20 15:22:44 +02:00

jwtutils

…

metricscache

…

notifications

fix: remove error log when notification manager is already closed (#18264)

2025-06-06 19:28:10 +10:00

oauthpki

fix: stop extending API key access if OIDC refresh is available (#17878)

2025-05-19 12:05:35 +04:00

portsharing

…

prebuilds

fix: reimplement reporting of preset-hard-limited metric (#18055)

2025-05-28 14:18:32 -04:00

prometheusmetrics

chore(coderd/prometheusmetrics): remove dbmem from tests (#18238)

2025-06-05 09:30:27 +02:00

promoauth

…

provisionerdserver

feat: use proto streams to increase maximum module files payload (#18268)

2025-06-13 12:46:26 -05:00

provisionerkey

…

pubsub

…

rbac

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

render

…

runtimeconfig

…

schedule

…

searchquery

…

telemetry

chore(coderd/telemetry): remove dbmem from tests (#18148)

2025-06-02 13:57:27 +02:00

testdata

chore: use static params when dynamic param metadata is missing (#17836)

2025-05-16 11:47:59 -05:00

tracing

…

updatecheck

…

userpassword

…

util

chore(vpn): send ping results over tunnel (#18200)

2025-06-06 14:18:57 +10:00

webpush

…

workspaceapps

…

workspacestats

…

wsbuilder

chore: remove dynamic-parameters experiment (#18290)

2025-06-12 12:15:05 -04:00

wspubsub

…

activitybump_test.go

…

apikey_test.go

feat: add separate max token lifetime for administrators (#18267)

2025-06-06 17:36:30 +02:00

apikey.go

feat: add separate max token lifetime for administrators (#18267)

2025-06-06 17:36:30 +02:00

apiroot.go

…

audit_internal_test.go

…

audit_test.go

chore: rollback PR #18081 (#18104)

2025-05-29 13:12:13 -03:00

audit.go

chore: rollback PR #18081 (#18104)

2025-05-29 13:12:13 -03:00

authorize_test.go

…

authorize.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

chat_test.go

…

chat.go

…

client_test.go

…

coderd_internal_test.go

…

coderd_test.go

…

coderd.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

csp.go

…

debug_test.go

…

debug.go

…

deployment_test.go

…

deployment.go

…

deprecated.go

…

experiments_test.go

…

experiments.go

…

externalauth_test.go

feat: add API key scope to restrict access to user data (#17692)

2025-05-15 15:32:52 +01:00

externalauth.go

…

files_test.go

…

files.go

…

gitsshkey_test.go

feat: add API key scope to restrict access to user data (#17692)

2025-05-15 15:32:52 +01:00

gitsshkey.go

feat: add API key scope to restrict access to user data (#17692)

2025-05-15 15:32:52 +01:00

inboxnotifications_internal_test.go

…

inboxnotifications_test.go

…

inboxnotifications.go

fix(coderd): fix panics by always checking for non-nil request logger (#18228)

2025-06-12 13:50:50 +03:00

insights_internal_test.go

…

insights_test.go

chore(coderd/database): enforce agent name unique within workspace build (#18052)

2025-05-28 14:21:17 +01:00

insights.go

…

latencycheck.go

…

members_test.go

…

members.go

…

notifications_test.go

…

notifications.go

…

oauth2_test.go

…

oauth2.go

…

organizations_test.go

…

organizations.go

…

pagination_internal_test.go

…

pagination.go

…

parameters_test.go

fix: add workspace owner id as query param to websocket (#18363)

2025-06-13 14:49:32 -04:00

parameters.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

presets_test.go

…

presets.go

…

provisionerdaemons_test.go

…

provisionerdaemons.go

…

provisionerjobs_internal_test.go

…

provisionerjobs_test.go

feat: add provisioner daemon name to provisioner jobs responses (#17877)

2025-05-19 16:05:39 +01:00

provisionerjobs.go

fix(coderd): fix panics by always checking for non-nil request logger (#18228)

2025-06-12 13:50:50 +03:00

roles_test.go

…

roles.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

tailnet_test.go

…

tailnet.go

…

templates_test.go

chore: remove dynamic-parameters experiment (#18290)

2025-06-12 12:15:05 -04:00

templates.go

chore: add 'classic_parameter_flow' column setting to templates (#17828)

2025-05-15 17:55:17 -05:00

templateversions_test.go

…

templateversions.go

chore: add form_type parameter argument to db (#17920)

2025-05-29 08:55:19 -05:00

updatecheck_test.go

…

updatecheck.go

…

userauth_test.go

test: ensure the return value of MockAuditor.Contains is checked (#18319)

2025-06-11 17:16:18 +10:00

userauth.go

…

users_test.go

…

users.go

chore: ensure proper rbac permissions on 'Acquire' file in the cache (#18348)

2025-06-16 13:40:45 +00:00

webpush_test.go

…

webpush.go

…

workspaceagentportshare_test.go

…

workspaceagentportshare.go

…

workspaceagents_test.go

feat(agent/agentcontainers): implement sub agent injection (#18245)

2025-06-10 12:37:54 +03:00

workspaceagents.go

fix(coderd): fix panics by always checking for non-nil request logger (#18228)

2025-06-12 13:50:50 +03:00

workspaceagentsrpc_internal_test.go

…

workspaceagentsrpc_test.go

fix: remove unnecessary user lookup in agent API calls (#17934)

2025-05-20 17:07:50 +02:00

workspaceagentsrpc.go

feat(coderd/agentapi): implement sub agent api (#17823)

2025-05-29 12:15:47 +01:00

workspaceapps_test.go

…

workspaceapps.go

…

workspacebuilds_test.go

chore: rollback PR #18025 (#18118)

2025-05-30 11:00:26 -03:00

workspacebuilds.go

chore: remove dynamic-parameters experiment (#18290)

2025-06-12 12:15:05 -04:00

workspaceproxies_test.go

…

workspaceproxies.go

…

workspaceresourceauth_test.go

…

workspaceresourceauth.go

…

workspaces_test.go

chore: rollback PR #18081 (#18104)

2025-05-29 13:12:13 -03:00

workspaces.go

chore: remove dynamic-parameters experiment (#18290)

2025-06-12 12:15:05 -04:00

workspaceupdates_test.go

…

workspaceupdates.go

…