Age | Commit message (Collapse) | Author | |
---|---|---|---|
2025-07-29 | Bugfix: Fix typo - we don't pass objects, just their IDs. | Frederick Muriuki Muriithi | |
2025-07-29 | Assign `system-administrator` role on all non-system resources. | Frederick Muriuki Muriithi | |
2025-07-29 | Assign now system-wide resource-access privileges to sysadmins. | Frederick Muriuki Muriithi | |
2025-07-29 | Add system-wide resource-access privileges for system administrators | Frederick Muriuki Muriithi | |
System administrators need to access, and modify the resources in the system, and to do that, we need to grant them specific privileges to check against. These privileges act on the wrapper resource objects, not necessarily the data attached to the resource object. | |||
2025-07-29 | Deprecate older authorisation-checking functions. | Frederick Muriuki Muriithi | |
2025-07-29 | Import entire uuid module rather than specific symbols. | Frederick Muriuki Muriithi | |
2025-07-29 | Create outline for deleting user groups from the auth server. | Frederick Muriuki Muriithi | |
2025-07-29 | Add spec-based authorisation checker function. | Frederick Muriuki Muriithi | |
2025-07-28 | Add group details to masquerade data. | Frederick Muriuki Muriithi | |
2025-07-28 | Only include the group if the user is a member of one. | Frederick Muriuki Muriithi | |
2025-07-22 | Migrations: Give sysadmins the 'system:user:edit' privilege. | Frederick Muriuki Muriithi | |
2025-07-22 | Migrations: New privilege (system:user:edit) | Frederick Muriuki Muriithi | |
Add a new privilege to give users the general ability to edit user information at the 'system level', i.e. edit user information for any user. | |||
2025-07-17 | Bugfix: remove obsolete variable name. | Frederick Muriuki Muriithi | |
2025-07-17 | Bugfix: Get user IDs from objects. | Frederick Muriuki Muriithi | |
2025-07-17 | Bugfix: Retrieve the reasons, not the entire dict. | Frederick Muriuki Muriithi | |
2025-07-17 | Improve messaging for deletion failures. | Frederick Muriuki Muriithi | |
2025-07-17 | Add note to self for possible "improvement" in user deletion | Frederick Muriuki Muriithi | |
Add a note for considerations to make regarding recovery from error trying to delete users, so we can respond with more informative messages. Here, "improvement" is in quotes, because the priority leans more towards collecting more information for better feedback, which might be at the expense of speed of code. | |||
2025-07-17 | Decouple gn-auth from production (https://genenetwork.org). | Frederick Muriuki Muriithi | |
Copy over files from GN2 for a quick decoupling of gn-auth from the production system. | |||
2025-07-16 | Implement initial views into the groups endpoints. | Frederick Muriuki Muriithi | |
2025-07-16 | Bugfix: Handle possible missing json data. | Frederick Muriuki Muriithi | |
2025-07-09 | Improve error handling and reporting. | Frederick Muriuki Muriithi | |
- Refactor out common functionality into reusable utilities - Handle errors from the Authlib library/package - Handle 4xx errors generically. | |||
2025-07-09 | Setup independent logging for packages. | Frederick Muriuki Muriithi | |
2025-07-09 | Move error handling into separate package. | Frederick Muriuki Muriithi | |
2025-07-09 | Update docs: Indicate how to run tests in parallel. | Frederick Muriuki Muriithi | |
2025-07-09 | Update expected privileges for group-leader users. | Frederick Muriuki Muriithi | |
2025-07-09 | Fix some linting issues. | Frederick Muriuki Muriithi | |
2025-07-08 | Provide zero counts for all and filtered totals. | Frederick Muriuki Muriithi | |
2025-07-08 | Enable filtering of groups list and length limiting. | Frederick Muriuki Muriithi | |
2025-07-07 | Enable limiting the number of items returned. | Frederick Muriuki Muriithi | |
2025-07-07 | Check "Content-Type" header. Also process get params. | Frederick Muriuki Muriithi | |
* Use the "Content-Type" value to check whether or not to attempt to read the sent values as json * Process also the get parameter, to allow the endpoints to be slightly more flexible (this probably breaks how HTTP should work). | |||
2025-07-03 | Add role management privileges to the group-leader role. | Frederick Muriuki Muriithi | |
2025-07-03 | Fix minor issues caught by mypy. | Frederick Muriuki Muriithi | |
2025-07-03 | Bugfix: Fix clauses for user listing query. | Frederick Muriuki Muriithi | |
2025-07-03 | Pytest: (invocation) Use marker (rather than keyword) expressions. | Frederick Muriuki Muriithi | |
2025-07-03 | Fix some linting issues. | Frederick Muriuki Muriithi | |
2025-07-03 | Bugfix: Build up "WHERE" clauses correctly | Frederick Muriuki Muriithi | |
Have the email and name checked with "OR" where both are present. | |||
2025-07-03 | Provide missing symbol. | Frederick Muriuki Muriithi | |
2025-07-03 | Bugfix: Set the correct value. | Frederick Muriuki Muriithi | |
2025-06-25 | Delete system users. | Frederick Muriuki Muriithi | |
2025-06-24 | Search in names too. Fix query params. | Frederick Muriuki Muriithi | |
2025-06-24 | Enable filtering of data, and limiting length. | Frederick Muriuki Muriithi | |
2025-06-11 | Fix failing tests: add new privilege to group-leader. | Frederick Muriuki Muriithi | |
2025-06-11 | Fix code issue caught by type-checker. | Frederick Muriuki Muriithi | |
2025-06-11 | Fix code issues caught by the linter. | Frederick Muriuki Muriithi | |
2025-06-09 | Add inbredset-group resource type in unlinked_data function | zsloan | |
This still needs to be implemented, but this commit prevents the key error | |||
2025-06-09 | Add migrations for admin UI and batch edit privileges/roles | zsloan | |
2025-06-09 | Enable linking multiple data items to a resource in single request. | Frederick Muriuki Muriithi | |
2025-06-09 | Link 'group:data:link-to-group' privilege to the group-leader role. | Frederick Muriuki Muriithi | |
2025-06-09 | Add a new privilege: 'group:data:link-to-group' | Frederick Muriuki Muriithi | |
2025-06-09 | Use more flexible check for authorisation. | Frederick Muriuki Muriithi | |
Use the more flexible check for authorisation that a user has on a specific resource. |