Skip to content

chore: remove rbac psuedo resources, add custom verbs #13276

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 24 commits into from
May 15, 2024
Merged

chore: remove rbac psuedo resources, add custom verbs #13276

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
6e15df8
wip
Emyrk May 9, 2024
ca7e8a5
Fix readme
Emyrk May 9, 2024
4b69926
work on policy
Emyrk May 9, 2024
a9b8984
WIP: delete all old resources, generating them from a policy
Emyrk May 13, 2024
48f0593
Start the move to policy.Action
Emyrk May 13, 2024
6964513
update gen to be sorted
Emyrk May 13, 2024
22861a1
fix some compile issus
Emyrk May 13, 2024
1b7112c
begin some aciton work
Emyrk May 14, 2024
cd68fef
more progrss
Emyrk May 14, 2024
1e1778d
More dbauthz
Emyrk May 14, 2024
c170068
roles are personal user data
Emyrk May 14, 2024
3cc6ae0
remove user data object, and just use a data object
Emyrk May 14, 2024
c70c526
Update roles
Emyrk May 14, 2024
66107d3
update roles_test to include all actions and resources
Emyrk May 14, 2024
582fdcd
workspace dormancy
Emyrk May 14, 2024
fc4af1e
remove rbac object fields from policy def
Emyrk May 14, 2024
282bc93
add codersdk autogen
Emyrk May 15, 2024
0fab76f
fix ui enums
Emyrk May 15, 2024
ba4c327
cleanup
Emyrk May 15, 2024
e4d59ae
cleanup
Emyrk May 15, 2024
11bf1d5
make start/stop workspaces different actions
Emyrk May 15, 2024
a5c2fd5
make fmt
Emyrk May 15, 2024
6be67fc
reset input.json
Emyrk May 15, 2024
7262bd8
make gen
Emyrk May 15, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update roles
  • Loading branch information
@Emyrk
Emyrk committed May 15, 2024
commit c70c5268589b0ec851b6ce815b04d5c59d0a79a4
17 changes: 8 additions & 9 deletions coderd/rbac/object_gen.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 5 additions & 5 deletions coderd/rbac/object_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -184,14 +184,14 @@ func TestAllResources(t *testing.T) {
var typeNames []string
resources := rbac.AllResources()
for _, r := range resources {
if r.Type == "" {
t.Errorf("empty type name: %s", r.Type)
if r.RBACObject().Type == "" {
t.Errorf("empty type name: %s", r.RBACObject().Type)
continue
}
if slice.Contains(typeNames, r.Type) {
t.Errorf("duplicate type name: %s", r.Type)
if slice.Contains(typeNames, r.RBACObject().Type) {
t.Errorf("duplicate type name: %s", r.RBACObject().Type)
continue
}
typeNames = append(typeNames, r.Type)
typeNames = append(typeNames, r.RBACObject().Type)
}
}
1 change: 1 addition & 0 deletions coderd/rbac/policy/policy.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -244,6 +244,7 @@ var RBACPermissions = map[string]PermissionDefinition{
"assign_org_role": {
Actions: map[Action]ActionDefinition{
ActionAssign: actDef(0, "ability to assign org scoped roles"),
ActionRead: actDef(0, "view what roles are assignable"),
ActionDelete: actDef(0, "ability to delete org scoped roles"),
},
},
Expand Down