Skip to content

feat: get and update group IdP Sync settings #14647

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 14 commits into from
Sep 16, 2024
Merged

feat: get and update group IdP Sync settings #14647

Changes from 1 commit
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
64aee46
🧹
aslilac Sep 11, 2024
a7cc9a2
sort of testing
aslilac Sep 13, 2024
497d7e6
:(
aslilac Sep 13, 2024
2c243d1
🧹
aslilac Sep 13, 2024
3e1087e
make gen
Emyrk Sep 16, 2024
86ba866
add unit test to enforce unauthorized
Emyrk Sep 16, 2024
c8982a4
update unit test
Emyrk Sep 16, 2024
1093e83
add unit test for legacy group settings
Emyrk Sep 16, 2024
4ac097b
update unit test to use EntryNotFoundErr
Emyrk Sep 16, 2024
812a786
update unit tests and linting
Emyrk Sep 16, 2024
93d916c
add rbac authz test
Emyrk Sep 16, 2024
8449c9d
revert ui change
Emyrk Sep 16, 2024
0045409
gen
Emyrk Sep 16, 2024
ec83e80
fmt
Emyrk Sep 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
add rbac authz test
  • Loading branch information
@Emyrk
Emyrk committed Sep 16, 2024
commit 93d916cb1635eaf476a8a4086187b0a1bd9a6104
14 changes: 14 additions & 0 deletions coderd/rbac/roles_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -705,6 +705,20 @@ func TestRolePermissions(t *testing.T) {
},
},
},
{
Name: "IDPSyncSettings",
Actions: []policy.Action{policy.ActionRead, policy.ActionUpdate},
Resource: rbac.ResourceIdpsyncSettings.InOrg(orgID),
AuthorizeMap: map[bool][]hasAuthSubjects{
true: {owner, orgAdmin},
false: {
orgMemberMe, otherOrgAdmin,
memberMe, userAdmin, templateAdmin,
orgAuditor, orgUserAdmin, orgTemplateAdmin,
otherOrgMember, otherOrgAuditor, otherOrgUserAdmin, otherOrgTemplateAdmin,
},
},
},
}

// We expect every permission to be tested above.
Expand Down