Skip to content

chore: remove rbac psuedo resources, add custom verbs #13276

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 24 commits into from
May 15, 2024
Merged

chore: remove rbac psuedo resources, add custom verbs #13276

Changes from 1 commit
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
6e15df8
wip
Emyrk May 9, 2024
ca7e8a5
Fix readme
Emyrk May 9, 2024
4b69926
work on policy
Emyrk May 9, 2024
a9b8984
WIP: delete all old resources, generating them from a policy
Emyrk May 13, 2024
48f0593
Start the move to policy.Action
Emyrk May 13, 2024
6964513
update gen to be sorted
Emyrk May 13, 2024
22861a1
fix some compile issus
Emyrk May 13, 2024
1b7112c
begin some aciton work
Emyrk May 14, 2024
cd68fef
more progrss
Emyrk May 14, 2024
1e1778d
More dbauthz
Emyrk May 14, 2024
c170068
roles are personal user data
Emyrk May 14, 2024
3cc6ae0
remove user data object, and just use a data object
Emyrk May 14, 2024
c70c526
Update roles
Emyrk May 14, 2024
66107d3
update roles_test to include all actions and resources
Emyrk May 14, 2024
582fdcd
workspace dormancy
Emyrk May 14, 2024
fc4af1e
remove rbac object fields from policy def
Emyrk May 14, 2024
282bc93
add codersdk autogen
Emyrk May 15, 2024
0fab76f
fix ui enums
Emyrk May 15, 2024
ba4c327
cleanup
Emyrk May 15, 2024
e4d59ae
cleanup
Emyrk May 15, 2024
11bf1d5
make start/stop workspaces different actions
Emyrk May 15, 2024
a5c2fd5
make fmt
Emyrk May 15, 2024
6be67fc
reset input.json
Emyrk May 15, 2024
7262bd8
make gen
Emyrk May 15, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
reset input.json
  • Loading branch information
@Emyrk
Emyrk committed May 15, 2024
commit 6be67fc63e68f0ce417813b75b259dee40ca7a70
129 changes: 29 additions & 100 deletions coderd/rbac/input.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,117 +1,46 @@
{
"action": "delete",
"action": "never-match-action",
"object": {
"id": "bf9bba2a-dd6b-4a07-8500-1dac6ddc5171",
"owner": "36e3c780-2ae3-443b-ad3c-ceb410a55d12",
"org_owner": "19285bb2-022d-41c6-a7f2-8ace10825691",
"type": "workspace_dormant",
"acl_user_list": null,
"acl_group_list": null
"id": "9046b041-58ed-47a3-9c3a-de302577875a",
"owner": "00000000-0000-0000-0000-000000000000",
"org_owner": "bf7b72bd-a2b1-4ef2-962c-1d698e0483f6",
"type": "workspace",
"acl_user_list": {
"f041847d-711b-40da-a89a-ede39f70dc7f": ["create"]
},
"acl_group_list": {}
},
"subject": {
"FriendlyName": "Provisioner Daemon",
"ID": "00000000-0000-0000-0000-000000000000",
"Roles": [
"id": "10d03e62-7703-4df5-a358-4f76577d4e2f",
"roles": [
{
"name": "provisionerd",
"display_name": "Provisioner Daemon",
"name": "owner",
"display_name": "Owner",
"site": [
{
"negate": false,
"resource_type": "api_key",
"resource_type": "*",
"action": "*"
},
{
"negate": false,
"resource_type": "file",
"action": "read"
},
{
"negate": false,
"resource_type": "group",
"action": "read"
},
{
"negate": false,
"resource_type": "organization",
"action": "read"
},
{
"negate": false,
"resource_type": "system",
"action": "*"
},
{
"negate": false,
"resource_type": "template",
"action": "read"
},
{
"negate": false,
"resource_type": "template",
"action": "update"
},
{
"negate": false,
"resource_type": "user",
"action": "read_personal"
},
{
"negate": false,
"resource_type": "user",
"action": "update_personal"
},
{
"negate": false,
"resource_type": "user",
"action": "read"
},
{
"negate": false,
"resource_type": "workspace",
"action": "read"
},
{
"negate": false,
"resource_type": "workspace",
"action": "stop"
},
{
"negate": false,
"resource_type": "workspace",
"action": "start"
},
{
"negate": false,
"resource_type": "workspace",
"action": "update"
},
{
"negate": false,
"resource_type": "workspace",
"action": "delete"
},
{
"negate": false,
"resource_type": "workspace_dormant",
"action": "read"
},
{
"negate": false,
"resource_type": "workspace_dormant",
"action": "update"
},
{
"negate": false,
"resource_type": "workspace_dormant",
"action": "stop"
}
],
"org": {},
"user": []
}
],
"Groups": null,
"Scope": "all"
"groups": ["b617a647-b5d0-4cbe-9e40-26f89710bf18"],
"scope": {
"name": "Scope_all",
"display_name": "All operations",
"site": [
{
"negate": false,
"resource_type": "*",
"action": "*"
}
],
"org": {},
"user": [],
"allow_list": ["*"]
}
}
}