 Claire Casey
|
4722fd4c20
|
add tests for checking conditional permissions and update api-reports
Signed-off-by: Claire Casey <ccasey@spotify.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Claire Casey
|
b3ae194526
|
add optional custom rules to scaffolder router
Signed-off-by: Claire Casey <ccasey@spotify.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Vincenzo Scamporlino
|
a89a930e8a
|
scaffolder: mark new models as v1beta3
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Vincenzo Scamporlino
|
bb0addebd5
|
scaffolder: tests for validating tags
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Vincenzo Scamporlino
|
6e5e1b49c0
|
permission-node rename createIsAuthorized to createConditionAuthorizer
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Vincenzo Scamporlino
|
5118294421
|
scaffolder: validate backstage:permissions in templates
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Ainhoa Larumbe
|
67edf386c6
|
scaffolder-backend: add metadata endpoint to expose template permissions
Signed-off-by: Ainhoa Larumbe <ainhoaL@users.noreply.github.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Vincenzo Scamporlino
|
c42a1159ad
|
scaffolder: api report
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Vincenzo Scamporlino
|
65e989f401
|
add changesets
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:49 +01:00 |
|
|
Vincenzo Scamporlino
|
e676507491
|
scaffolder: api report
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:48 +01:00 |
|
|
Vincenzo Scamporlino
|
7ebb4f4349
|
scaffolder-common: rollback properties
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:48 +01:00 |
|
|
Vincenzo Scamporlino
|
49d886a151
|
backend: remove scaffolder-common as dependency
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:48 +01:00 |
|
|
Vincenzo Scamporlino
|
bc82c96a18
|
scaffolder-backend: make permissionApi optional
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:48 +01:00 |
|
|
Vincenzo Scamporlino
|
35c564396b
|
scaffolder: export common permissions utilities as alpha
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:40:47 +01:00 |
|
|
Vincenzo Scamporlino
|
dcbd264860
|
scaffolder-backend: mark rules utilities as alpha
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:39:57 +01:00 |
|
|
Vincenzo Scamporlino
|
06f58a20f9
|
scaffolder: accessControl to permissions
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:38:59 +01:00 |
|
|
Harry Hogg
|
1f03603d8d
|
Renamed 'scaffolderStepRules' to 'scaffolderTemplateRules'
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:38:59 +01:00 |
|
|
Harry Hogg
|
3c2d54e9fb
|
Updated scaffolder-backend api-reports
Signed-off-by: Harry Hogg <hhogg@spotify.com>
|
2023-03-21 16:38:56 +01:00 |
|
|
Harry Hogg
|
aac120c30d
|
Updated permission-node api-reports
Signed-off-by: Harry Hogg <hhogg@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
691ef9a4da
|
Updated scaffolder-common api-reports
Signed-off-by: Harry Hogg <hhogg@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
7fc6227c14
|
Updated the backend template to pass permissionApi into scaffolder
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
6663e57fa7
|
Added tests to check authorized template on get and put endpoint
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
47e5d7712a
|
Fixed older router tests
Signed-off-by: Harry Hogg <hhogg@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
8dbacc2228
|
scaffolder-backend: test hasTag rule
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
b79dee1cf8
|
permission-node: test createIsAuthorized
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
66935d8c31
|
scaffolder: pass permissions dependency
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
a16166c24f
|
scaffolder: cleanup types
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
e2559f8b1e
|
scaffolder: rename metadata to accessControl
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
09e28e2c71
|
Removed the property scaffolder rule
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
97be4a96ed
|
Refactored createIsAuthorized to take a decision
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
a91abdf061
|
chore: cleanup
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
faba894d8b
|
scaffolder: rename resource type
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
3e109f452e
|
scaffolder: rollback template and config
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
2624c1afff
|
permissions: rollback default policy
Co-authored-by: Harry Hogg <hhogg@spotify.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
906be33035
|
Added some todos for cleanup
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
2b124bc24a
|
Reworked authorization of conditions to use a single export by combing getRule and applyConditions into
createIsAuthorized
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
2b8ad06250
|
scaffolder: added description to hasTag rule
Signed-off-by: Harry Hogg <hhogg@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
53c0aa0029
|
scaffolder: added back in playlist permission handling
Signed-off-by: Harry Hogg <hhogg@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
55c49d2b6c
|
scaffolder: authorize parameters and properties
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
2e7d060ef9
|
scaffolder: remove conditions wrapper
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
031781fb20
|
scaffolder: expose template subtypes
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
562611ef56
|
scaffolder: make rule generic
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Vincenzo Scamporlino
|
133915942a
|
scaffolder: single resource type
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:55 +01:00 |
|
|
Harry Hogg
|
277847e064
|
Reworked permission rules and filtering to follow similar pattern to catalog
Signed-off-by: Harry Hogg <hhogg@spotify.com>
Co-authored-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:53 +01:00 |
|
|
Vincenzo Scamporlino
|
f8540c1049
|
backend: add example of template with capabilities
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:32 +01:00 |
|
|
Vincenzo Scamporlino
|
766298715c
|
backend: permission policy scaffolder example
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:32 +01:00 |
|
|
Vincenzo Scamporlino
|
1424f89d4d
|
scaffolder: authorize permissions
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:32 +01:00 |
|
|
Vincenzo Scamporlino
|
2d34af80ef
|
scaffolder: add conditional rules
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:32 +01:00 |
|
|
Vincenzo Scamporlino
|
6f8b6c7069
|
scaffolder: add permissions
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
|
2023-03-21 16:37:30 +01:00 |
|
|
Fredrik Adelöw
|
cc47161fe3
|
Merge pull request #16960 from backstage/rugvip/handle
backend-app-api: register global error handlers
|
2023-03-21 14:29:34 +01:00 |
|