gn-auth - GN authentication and authorization service

Age	Commit message (Collapse)	Author
12 days	Deprecate functions which duplicate those in gn-libs.	Frederick Muriuki Muriithi
	The `gn_auth.auth.authorisation.resources.checks.can_[edit/delete]` functions duplicate the utility provided by similar named functions in the `gn_libs.privileges.resources` package. These ones are, thus, deprecated in favour of the gn-libs ones.
12 days	Delete unused function.	Frederick Muriuki Muriithi
	The `gn_auth.auth.authorisation.resources.checks.can_view` function is no longer used in this code base. It can be safely removed.
2026-05-18	Update call to `can_edit` to separate resource and system privileges	Frederick Muriuki Muriithi

2026-05-01	Ensure ALL users with access to the resource are actually listed.	Frederick Muriuki Muriithi

2026-04-23	Remove debug artifact.	Frederick Muriuki Muriithi

2026-04-23	Improve error messages.	Frederick Muriuki Muriithi

2026-04-23	Fix minor linting bugs.	Frederick Muriuki Muriithi

2026-04-23	Allow anonymous users "public-view" privileges.	Frederick Muriuki Muriithi
	The default system-level privilege is the "public-view", i.e. the users can view basic details about the Genenetwork system. If no authorisation is provided when accessing the /auth/system/roles endpoint, return the default role/privilege.
2026-04-20	Implement editing resource name.	Frederick Muriuki Muriithi

2026-04-20	Use module-level logger rather than application's logger.	Frederick Muriuki Muriithi

2026-04-15	Do not grant sysadmins direct access at resource creation.	Frederick Muriuki Muriithi

2026-04-08	user resources: Add a text filter for further filtering.	Frederick Muriuki Muriithi

2026-04-08	user resources: return total with filtered records.	Frederick Muriuki Muriithi
	Return a count of the total number of resources that the user has access to even if we are only interested in a few of the records.
2026-04-07	Update code to handle resource creators and creation times.	Frederick Muriuki Muriithi

2026-04-07	Add creator and creation time tracking to Resources.	Frederick Muriuki Muriithi

2026-04-02	Update resource creation: Add tracking information	Frederick Muriuki Muriithi
	Add the creator of the resource and the time the resource was created.
2026-03-26	Update edit access: use more flexible 'can_edit(...)' function.	Frederick Muriuki Muriithi

2026-02-10	Bug: Fix import path.	Frederick Muriuki Muriithi

2026-02-10	Authorisation Check: New function to check user has edit access.	Frederick Muriuki Muriithi

2026-02-10	Authorisation Check: New function to check user has view access.	Frederick Muriuki Muriithi

2026-02-10	Use Auth function that checks for delete access.	Frederick Muriuki Muriithi

2026-02-10	Authorisation Check: New function to check user has delete access.	Frederick Muriuki Muriithi

2026-02-06	Replace hard-coded email check with check against privileges	Frederick Muriuki Muriithi
	Fix the check: rather than using a hard-coded email to check for authorisation, we instead check against the privileges the user has on the resource, or whether they have global privileges allowing them to act on any data.
2025-12-29	`system_resource(...)` function takes either connection or cursor	Frederick Muriuki Muriithi
	Refactor to allow the `gn_auth.auth.authorisation.resources.system.models.system_resource` function to take either a database connection or cursor and use that to retrieve the "system resource".
2025-12-29	`create_resource(...)` function takes either connection or cursor	Frederick Muriuki Muriithi
	Refactor to allow the `gn_auth.auth.authorisation.resources.models.create_resource` function to take either a database connection or cursor to perform its tasks.
2025-12-03	Improve error messaging.	Frederick Muriuki Muriithi

2025-07-31	Clean up data on group deletion.	Frederick Muriuki Muriithi

2025-07-31	Re-grant access to sysadmin, in case they're removed as group member	Frederick Muriuki Muriithi

2025-07-31	Revoke roles a user has on group when they are removed as a member.	Frederick Muriuki Muriithi

2025-07-31	Check for data inconsistency.	Frederick Muriuki Muriithi

2025-07-31	Prevent error in case sysadmin user already has access	Frederick Muriuki Muriithi
	In case any sysadmin user has access to the resource, we do not want the query failing for other sysadmins.
2025-07-31	Grant sysadmins access to user group when its created.	Frederick Muriuki Muriithi

2025-07-31	Delete a group.	Frederick Muriuki Muriithi

2025-07-31	Break circular dependency - move utility function to module of use.	Frederick Muriuki Muriithi

2025-07-31	Add function to retrieve inbredset-group data.	Frederick Muriuki Muriithi

2025-07-31	Fix query to remove user from group.	Frederick Muriuki Muriithi

2025-07-30	Provide endpoint to remove a group member.	Frederick Muriuki Muriithi

2025-07-30	Fix linting errors and typos.	Frederick Muriuki Muriithi

2025-07-30	Call the correct function.	Frederick Muriuki Muriithi

2025-07-30	Remove a user from a group as a member.	Frederick Muriuki Muriithi

2025-07-30	Fetch resource object that wraps the group for authorisations	Frederick Muriuki Muriithi

2025-07-30	Don't allow user to create a group when they are a member of another	Frederick Muriuki Muriithi
	When user is made a member of a group, we revoke their ability to create a new group.
2025-07-30	Grant user `system-administrator` role on all resources	Frederick Muriuki Muriithi
	During promotion of a user to system admin, grant the user `system-administrator` role on all resources in the system.
2025-07-29	Fix issues caught by the type-checker.	Frederick Muriuki Muriithi

2025-07-29	Fix issues caught by code-linter.	Frederick Muriuki Muriithi

2025-07-29	Actually delete a resource.	Frederick Muriuki Muriithi

2025-07-29	Grant sysadmins access to the resource when created.	Frederick Muriuki Muriithi

2025-07-29	Add function to delete a resource.	Frederick Muriuki Muriithi

2025-07-29	Add new route for consistency.	Frederick Muriuki Muriithi

2025-07-29	Refactor: Replace old auth-checking function with spec-based one.	Frederick Muriuki Muriithi