25 Commits

Author SHA1 Message Date
leigh-mil
e59e3b959c Add listener to User model to record permission set updates and update user audit log template 2019-08-13 16:36:38 -04:00
dandds
df06d1b62f Use application_role_id on environment_roles.
In the future, an `application_invitation1 will not refer to a `user` until
someone accepts the invitation; they'll only reference an
`application_role`. When a user is invited to an application, the
inviter can specify the environments the invitee should have access to.
For this to be possible, an `environment_role` should reference an
`application_role`, because no `user` entity will be known at that time.

In addition to updating all the models and domain methods necessary for
this change, this commit deletes unused code and tests that were
dependent on `environment_roles` having a `user_id` foreign key.
2019-05-31 11:21:20 -04:00
leigh-mil
a1eb7ec935 Make sure all log events have portfolio and app ids (where applicable) 2019-05-22 13:08:44 -04:00
leigh-mil
b3ecd1658c Add application_id column to AuditEvent
Use application_id and portfolio_id if the resource is a portfolio in AuditableMixin
Clean up some residual references to workspace
2019-05-22 13:08:44 -04:00
dandds
078264bec7 add access tests for all access-protected routes
- cleans up skipped access tests in domain tests
- cleans up other skipped tests that are no longer relevant
2019-03-22 06:33:01 -04:00
dandds
4a0dd2d432 remove unused domain methods and arguments 2019-03-22 06:31:20 -04:00
dandds
de7c69bde7 apply access decorator to routes 2019-03-22 06:30:21 -04:00
dandds
0ea21fbb9b remove access checks from domain methods 2019-03-22 06:30:02 -04:00
dandds
0f9662e2f2 restore audit log access test 2019-03-21 05:38:28 -04:00
dandds
366ada5a90 check sitewide perms for portfolio access, restore ccpo tests 2019-03-21 05:38:28 -04:00
dandds
bec5d11bfe users have permission sets for site-wide perms 2019-03-21 05:38:28 -04:00
dandds
d3c3209fc0 cleanup unused portfolio roles 2019-03-15 07:14:49 -04:00
dandds
1a122c5335 rename role -> permission_set everywhere 2019-03-15 07:14:49 -04:00
dandds
0c2ab6fb7a remove portfolio_role direct relationship to role 2019-03-15 07:14:49 -04:00
dandds
44a4d98978 switch portfolio authorization to rely on new permission sets 2019-03-15 07:14:49 -04:00
dandds
d3d36822df workspace -> portfolio everywhere 2019-01-14 16:00:17 -05:00
dandds
3fc323d785 project -> application everywhere 2019-01-14 16:00:17 -05:00
leigh-mil
52bfb4b7d4 Add assertions to tests so they are more explicit 2019-01-09 13:16:03 -05:00
leigh-mil
a48b814263 Update query to also return events that update the workspace 2019-01-09 13:16:03 -05:00
leigh-mil
466f2565b5 Add tests 2019-01-09 13:16:03 -05:00
Montana
c071945b3b Spelling error and better name use 2018-11-21 14:23:37 -05:00
richard-dds
4244ecf9b7 Rename pagination args to pagination_opts 2018-11-12 16:45:55 -05:00
richard-dds
c3e395753c Add pagination to AuditLog.get_all_events 2018-11-12 16:33:49 -05:00
richard-dds
22f02f604f Add test which ensures that CCPO can view the audit log 2018-09-25 13:09:54 -04:00
richard-dds
ddc2e2fad7 Automatic audit logging using SQLA events 2018-09-25 13:09:54 -04:00