about summary refs log tree commit diff
path: root/gn_auth/auth
AgeCommit message (Collapse)Author
2025-07-29Bugfix: Fix typo - we don't pass objects, just their IDs.Frederick Muriuki Muriithi
2025-07-29Assign now system-wide resource-access privileges to sysadmins.Frederick Muriuki Muriithi
2025-07-29Add system-wide resource-access privileges for system administratorsFrederick Muriuki Muriithi
System administrators need to access, and modify the resources in the system, and to do that, we need to grant them specific privileges to check against. These privileges act on the wrapper resource objects, not necessarily the data attached to the resource object.
2025-07-29Deprecate older authorisation-checking functions.Frederick Muriuki Muriithi
2025-07-29Import entire uuid module rather than specific symbols.Frederick Muriuki Muriithi
2025-07-29Create outline for deleting user groups from the auth server.Frederick Muriuki Muriithi
2025-07-29Add spec-based authorisation checker function.Frederick Muriuki Muriithi
2025-07-28Add group details to masquerade data.Frederick Muriuki Muriithi
2025-07-28Only include the group if the user is a member of one.Frederick Muriuki Muriithi
2025-07-17Bugfix: remove obsolete variable name.Frederick Muriuki Muriithi
2025-07-17Bugfix: Get user IDs from objects.Frederick Muriuki Muriithi
2025-07-17Bugfix: Retrieve the reasons, not the entire dict.Frederick Muriuki Muriithi
2025-07-17Improve messaging for deletion failures.Frederick Muriuki Muriithi
2025-07-17Add note to self for possible "improvement" in user deletionFrederick Muriuki Muriithi
Add a note for considerations to make regarding recovery from error trying to delete users, so we can respond with more informative messages. Here, "improvement" is in quotes, because the priority leans more towards collecting more information for better feedback, which might be at the expense of speed of code.
2025-07-16Implement initial views into the groups endpoints.Frederick Muriuki Muriithi
2025-07-16Bugfix: Handle possible missing json data.Frederick Muriuki Muriithi
2025-07-09Fix some linting issues.Frederick Muriuki Muriithi
2025-07-08Provide zero counts for all and filtered totals.Frederick Muriuki Muriithi
2025-07-08Enable filtering of groups list and length limiting.Frederick Muriuki Muriithi
2025-07-07Enable limiting the number of items returned.Frederick Muriuki Muriithi
2025-07-07Check "Content-Type" header. Also process get params.Frederick Muriuki Muriithi
* Use the "Content-Type" value to check whether or not to attempt to read the sent values as json * Process also the get parameter, to allow the endpoints to be slightly more flexible (this probably breaks how HTTP should work).
2025-07-03Fix minor issues caught by mypy.Frederick Muriuki Muriithi
2025-07-03Bugfix: Fix clauses for user listing query.Frederick Muriuki Muriithi
2025-07-03Fix some linting issues.Frederick Muriuki Muriithi
2025-07-03Bugfix: Build up "WHERE" clauses correctlyFrederick Muriuki Muriithi
Have the email and name checked with "OR" where both are present.
2025-07-03Provide missing symbol.Frederick Muriuki Muriithi
2025-07-03Bugfix: Set the correct value.Frederick Muriuki Muriithi
2025-06-25Delete system users.Frederick Muriuki Muriithi
2025-06-24Search in names too. Fix query params.Frederick Muriuki Muriithi
2025-06-24Enable filtering of data, and limiting length.Frederick Muriuki Muriithi
2025-06-11Fix code issue caught by type-checker.Frederick Muriuki Muriithi
2025-06-11Fix code issues caught by the linter.Frederick Muriuki Muriithi
2025-06-09Add inbredset-group resource type in unlinked_data functionzsloan
This still needs to be implemented, but this commit prevents the key error
2025-06-09Enable linking multiple data items to a resource in single request.Frederick Muriuki Muriithi
2025-06-09Use more flexible check for authorisation.Frederick Muriuki Muriithi
Use the more flexible check for authorisation that a user has on a specific resource.
2025-06-09Add function to fetch the wrapper resource for a specific group.Frederick Muriuki Muriithi
2025-06-09Add a function to fetch the system resource.Frederick Muriuki Muriithi
2025-06-09Check for a user's privileges on a particular resource.Frederick Muriuki Muriithi
Add a general function to check that a particular user has certain privileges on a particular resource.
2025-06-09Allow linking of data by passing the raw ids too.Frederick Muriuki Muriithi
2025-05-06Fix failing mypy.Munyoki Kilyungi
Signed-off-by: Munyoki Kilyungi <me@bonfacemunyoki.com>
2025-05-05Fix "C0301: Line too long" pylint error.Munyoki Kilyungi
Signed-off-by: Munyoki Kilyungi <me@bonfacemunyoki.com>
2025-03-28Handle error raised in the case the request is not JSONFrederick Muriuki Muriithi
2025-03-28Simplify line where it was unnecessarily checking request.json twicezsloan
2025-03-14Add missing fix: Make display of minutes more human-friendly.Frederick Muriuki Muriithi
2025-03-14Make display of number of minutes more human-friendly.Frederick Muriuki Muriithi
2025-03-14Move expiry of auth-based emails into a config variable.Frederick Muriuki Muriithi
To ease setting up of value without changing code, move the value out into a configuration variable.
2025-02-26Fix pylint errors.Frederick Muriuki Muriithi
2025-02-26Remove use of obsolete flask_helpers module.Frederick Muriuki Muriithi
Create the requests in the class, as appropriate, checking for content-type.
2025-02-17Use default sys-admin group if user is not a member of any group.Frederick Muriuki Muriithi
Instead of failing, assign any population resource to the default system admin group, if the user is not a member of any group.
2025-02-17Provide a way to fetch a system-administrator's group.Frederick Muriuki Muriithi