leigh-mil
7bec073f78
Delete things related to deleted columns and table
2019-05-31 13:07:03 -04:00
dandds
42b912d4cb
Look up major database resources in a before_request hook.
...
A `before_request` hook queries the database for portfolios, requests,
and task orders based on the route arguments. The resources are added as
attributes on `g`. The portfolio context processor and the access
decorator now rely on those resources being available on `g`.
WIP: find major resources in before_request hook, apply to g
WIP: use g.portfolio for portfolio context processor
WIP: the access decorator should rely on the resources being available on g
2019-05-06 16:32:55 -04:00
dandds
9c10a14827
update authorization decorator to check for application permissions
2019-04-08 13:31:19 -04:00
Montana
ea2338bc30
Make test more robust
2019-04-04 08:38:52 -04:00
Montana
86f106f6d1
Test logging events for auditable mixin
2019-04-03 17:07:33 -04:00
George Drummond
933d90b203
Save PR and don't do an extra lookup
2019-04-03 09:43:40 -04:00
George Drummond
dee14b98be
Remove portfolio permissions when role is disabled
2019-04-03 09:43:40 -04:00
dandds
29ec4a80af
give access decorator override function a clearer name; exception -> override
2019-03-28 09:32:51 -04:00
dandds
dc2781ec82
more specificity in decorator exceptions test
2019-03-22 13:05:37 -04:00
dandds
6a18109bdd
catch individual errors in authorization decorator test
2019-03-22 12:41:29 -04:00
dandds
601ca1c655
fix access logs and add request method
2019-03-22 11:48:59 -04:00
dandds
746a5834c1
only pass one func to exception kwarg in access decorator
2019-03-22 06:33:01 -04:00
dandds
dff72422f0
log access attempts in access decorator
2019-03-22 06:31:20 -04:00
dandds
0ea21fbb9b
remove access checks from domain methods
2019-03-22 06:30:02 -04:00
dandds
78aa2dfcc6
permission set names should be constants on the domain class
2019-03-15 07:14:49 -04:00
dandds
1a122c5335
rename role -> permission_set everywhere
2019-03-15 07:14:49 -04:00
dandds
44a4d98978
switch portfolio authorization to rely on new permission sets
2019-03-15 07:14:49 -04:00
George Drummond
46345f9856
Break KO signing into two steps
2019-02-26 10:02:40 -05:00
richard-dds
fcc1caca1c
Move Request-specific auth checks into requests.authorization
2018-10-08 12:05:15 -04:00
Patrick Smith
6bfc7f77bc
Add test for new Authorization check
2018-08-30 14:45:39 -04:00
