Todd Knight
072b950540
Filter inactive and private oidc auth methods from unauthenticated list requests ( #1110 )
2021-04-13 16:42:25 -07:00
dd0f34bc35
Add new OIDC auth method. ( #1090 )
...
Co-authored-by: Todd Knight <T.Alan.Knight@gmail.com >
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com >
Co-authored-by: Michael Gaffney <mgaffney@users.noreply.github.com >
2021-04-08 20:54:32 -04:00
Todd Knight
48ef25433f
Fix creation of initial Scope roles ( #996 )
...
* Fix the creation of initial roles and users so the admin has permission to list/read resources.
* Adding known permission issue to CHANGELOG.md.
2021-03-16 08:42:08 -07:00
Jeff Mitchell
1ce09069a5
Move worker selection above session creation ( #929 )
...
This prevents a session being created when no workers are available to
handle it.
2021-02-12 11:05:33 -05:00
Jeff Mitchell
22462cdd84
Add read:self and cancel:self to sessions; add dev unpriv user ( #923 )
...
* Sessions support for read:self and cancel:self permissions. This is automatic with fallback; no API change is needed.
* Strips out values from listing if only self actions are allowed on the resource and the user ID is different. This prevents a default ACL of id=*;type=session;actions=read:self,cancel:self from causing all values to be visible when listing.
* Adds an unprivileged user to development/testing instances. This user has only default permissions plus the ability to authorize sessions in the default target.
2021-02-11 13:14:18 -05:00
Todd Knight
568594d1b3
Release the shared lock using a non cancelled context ( #918 )
2021-02-05 12:58:54 -07:00
Louis Ruch and Jeff Mitchell
628a02ad15
Scope role grants ( #913 )
...
* Add scope read grant to default roles
* Update CHANGELOG.md
Co-authored-by: Jeff Mitchell <jeffrey.mitchell@gmail.com >
2021-02-05 09:41:48 -08:00
Jeff Mitchell
fa700dc002
Add account ID templating ( #518 )
...
* Remove default role and create via the same mechanism as other initial resources
2020-10-01 10:51:54 -04:00
Jeff Mitchell
6ddfe407a3
Update allowed formats of ACL strings ( #508 )
2020-10-01 01:49:20 -04:00
Jim
fde96924af
refactor user account repo function names ( #476 )
2020-09-28 15:39:10 -04:00
Jim
21ca0b6388
SetAssociatedAccounts, DisassociateAccounts, AssociateAccounts with support for multiple accounts. ( #439 )
2020-09-25 13:35:32 -04:00
Jeff Mitchell
94f9d952be
Add connect -exec and ssh subcommand support ( #434 )
2020-09-24 17:29:12 -04:00
Jeff Mitchell
41a3c66ea1
Add names to init output ( #428 )
2020-09-24 12:54:40 -04:00
Jeff Mitchell
31fe9292b3
Instantiate default resources ( #425 )
2020-09-24 03:31:26 -04:00
Todd Knight
Louis RuchandJeff Mitchell