6861 Commits

Author SHA1 Message Date
leigh-mil
8f5db7805c Add pointer to cancel link 2020-01-10 10:25:56 -05:00
leigh-mil
1425459e35 Use permissions sets instead of portfolio.owner_role to see if a member is PPoC 2020-01-10 10:25:55 -05:00
leigh-mil
70462eee0c Display portfolio managers alphabetically instead of always having PPoC in the first table row 2020-01-10 10:25:55 -05:00
leigh-mil
959636fc91 Fix seed_sample script 2020-01-10 10:25:55 -05:00
leigh-mil
17642cda4e Rename file to better reflect contents 2020-01-10 10:25:55 -05:00
leigh-mil
ffa4a1370c Set width of Name column in portfolio managers table.
Delete unused table styles.
2020-01-10 10:25:55 -05:00
leigh-mil
da398bf1ff Add status labels to portfolio managers table.
Update PortfolioRole.display_status() to return same type of data as
ApplicationRole.display_status().
2020-01-10 10:25:55 -05:00
leigh-mil
a6fcd0c76f Fix styling on member forms.
Include flash message when portfolio manager is added.
Fix submit button text
2020-01-10 10:25:55 -05:00
leigh-mil
abfe8663a1 Update copy in perms form 2020-01-10 10:25:55 -05:00
leigh-mil
89035c815b Update styling for Manager name and add 'You' tag 2020-01-10 10:25:55 -05:00
leigh-mil
975d3d243b Delete tests and route associated with old portfolio member perms form 2020-01-10 10:25:55 -05:00
leigh-mil
c9d0c64c1f Fix and generalize styling for member form macro
Only display permissions with 'Edit' value
Delete unused files and rename MemberForm macro file
2020-01-10 10:25:55 -05:00
leigh-mil
79b2773852 Portfolio manager invite updates:
- Update the form to use BooleanFields for the permissions and make the
form more similar to the Application Members form
- Use MemberFormTemplate macro in the portfolio settings template
- fix tests affected by the form changes
2020-01-10 10:25:55 -05:00
leigh-mil
4d2a175136 Use generalized macro for new member form in application settings 2020-01-10 10:25:55 -05:00
leigh-mil
6e50a8cc1f Generalize macro for adding new member to an application or portfolio 2020-01-10 10:25:55 -05:00
leigh-mil
ff3e585dfe Initial formatting and styling of portfolio managers table. Deleted unused css 2020-01-10 10:25:55 -05:00
dandds
1ab0c26365 Log details about user login and logout.
To satisfy security requirements, we need to explicitly track:

- when a user attempts to log in, successful or not
- when a user logs out
- whether or not the user associated with a request is logged in

The first two are satisfied by extra log statements and the last is a
new boolean field on the JSON logs.
2020-01-10 10:20:35 -05:00
dandds
a0b96402f2 Remove user.provisional column.
This is leftover from a previous iteration of ATAT where inviting a user
to a portfolio would create a pending entry in the users table. This is
no longer used.
2020-01-10 10:20:35 -05:00
dandds
8fc543928d
Merge pull request #1299 from dod-ccpo/pki-cruft
Clean up unused PKI test files.
2020-01-10 10:19:56 -05:00
dandds
c2ea17b8d1 Clean up unused PKI test files.
Previously these files were being used to integration testing of mutual
TLS authentication. They're not any longer and can be removed.
2020-01-10 09:44:57 -05:00
leigh-mil
7f13643ff7
Merge pull request #1301 from dod-ccpo/to-builder-summary-items
TO Builder Step 4 bugfixes
2020-01-09 13:55:29 -05:00
leigh-mil
ca409cae6c Display TO number on Step 4 of TO builder 2020-01-09 10:50:10 -05:00
leigh-mil
34cb9daca6 Only fake expended funds if the TO is active 2020-01-09 10:37:54 -05:00
leigh-mil
0bf0e9dcb2 Remove unnecessary if statement that was preventing TO total value from being displayed. 2020-01-09 10:36:27 -05:00
graham-dds
29194a83e1
Merge pull request #1296 from dod-ccpo/bugfix/clin-title-xss
Remove an XSS vulnerability in CLIN title form input
2020-01-08 14:07:48 -05:00
graham-dds
c02bb8518e Escape html chanacters, if any, in CLIN number 2020-01-08 11:10:59 -05:00
graham-dds
eaa6b33b8e Add js lib function for escaping HTML 2020-01-08 11:10:59 -05:00
leigh-mil
b1d4d62533
Merge pull request #1288 from dod-ccpo/portfolio-admin-styling
Update styling on portfolio admin page
2020-01-08 10:50:42 -05:00
leigh-mil
db264696e7
Merge branch 'staging' into portfolio-admin-styling 2020-01-08 10:10:31 -05:00
dandds
821196e101
Merge pull request #1295 from robgil-dds/testing-k8s-iam
k8s IAM changes for keyvault access
2020-01-08 06:23:12 -05:00
Rob Gil
11404a6e5b Adds IAM roles for the Managed Identity Module
This adds the ability to pass in a list of roles to be assigned to the
managed identity user.
2020-01-07 14:00:27 -05:00
dandds
016f47f979
Merge pull request #1293 from dod-ccpo/nginx-redirects
Update NGINX config to use supplied domains.
2020-01-07 09:59:33 -05:00
dandds
51f7afd5b0 Update NGINX config to use supplied domains.
I left the domains hard-coded for the redirects in our NGINX config,
which was breaking authentication for versions of the site that don't
use that domain. This updates the config to use the domains supplied via
environment variable.
2020-01-07 06:12:56 -05:00
Rob Gil
f76934eaaf Adds initial OpenVPN configuration docs and powershell instructions 2020-01-06 19:45:46 -05:00
Rob Gil
a5ea2e3757 Testing k8s config 2020-01-06 18:21:48 -05:00
leigh-mil
667554dba4 Update styling on portfolio admin page, update portfolio form to include description 2020-01-06 15:55:07 -05:00
leigh-mil
86913ec738
Merge pull request #1287 from dod-ccpo/portfolio-defense-component-bug
Portfolio defense component bug
2020-01-06 15:53:36 -05:00
leigh-mil
64d9b8042e
Merge branch 'staging' into portfolio-defense-component-bug 2020-01-06 15:16:25 -05:00
graham-dds
c04c767219
Merge pull request #1282 from dod-ccpo/tidy-sidenav-and-topbar
Tidy sidenav and topbar
2020-01-06 15:11:09 -05:00
leigh-mil
da26273eb2
Merge branch 'staging' into portfolio-defense-component-bug 2020-01-06 14:58:48 -05:00
graham-dds
aba9c4facb Tidy topbar 2020-01-06 14:51:52 -05:00
graham-dds
cdd4a4eee1 Tidy sidenav 2020-01-06 14:51:52 -05:00
dandds
903edb8068
Merge pull request #1292 from dod-ccpo/session-cookie-domain
Config to specify session cookie domain.
2020-01-06 14:25:05 -05:00
dandds
60b12fca52 Config to specify session cookie domain.
This got lost somewhere along the way (almost certainly by me), so this
commit tries to make it explicit. The app needs to be able to configure
the session cookie domain name so that it is valid for both the main
site domain and the authentication subdomain. For instance, if the site
is runnning at uat.atat.code.mil and authentication happens at
auth-uat.atat.code.mil, SESSION_COOKIE_DOMAIN should be set to
atat.code.mil so that it's valid for both.

This adds the setting to the base INI file and a default for our K8s
clusters.
2020-01-06 14:07:53 -05:00
leigh-mil
e77b69dc41
Merge pull request #1290 from dod-ccpo/to-fixes
Fix translations
2020-01-06 13:31:52 -05:00
leigh-mil
59a7ef91b3
Merge branch 'staging' into to-fixes 2020-01-06 13:14:39 -05:00
leigh-mil
8710028256 Fix factories and seed sample script
Update display of defense component on portfolio settings page
2020-01-06 13:08:57 -05:00
leigh-mil
dad54ec139 Create new migration to convert column type of defense_component from
string to array
2020-01-06 13:08:56 -05:00
graham-dds
d0fd7126be
Merge pull request #1286 from dod-ccpo/bugfix/inclusive-pop-dates
Bugfix - Inclusive pop dates
2020-01-06 13:00:09 -05:00
graham-dds
46ed1f0e71 Remove / refactor TO class properties
This commit removes properties that weren't be used anywhere in the code
 base. It also refactors two properties to use sum() with a generator
comprehension instead of a for loop.
2020-01-06 12:29:59 -05:00