Commit Graph

99 Commits

Author SHA1 Message Date
Qiu Jian
2c7c817ddc fix: string2scope ignore user scope 2019-10-11 22:06:05 +08:00
Qiu Jian
5a024b7cfe fix: reduce policy sync worker queue size 2019-09-27 23:00:13 +08:00
Rain
e3ea4e3bb8 fix 2019-09-27 14:15:29 +08:00
ioito
a40729b71a fix: typo 2019-09-26 11:11:19 +08:00
Rain
dc68d23ff6 support Secondary authority management for contact and notification
rpc=>grpc, go=>workerMan

pull dingtalk auto

grpc
2019-09-24 15:33:53 +08:00
yunion-ci-robot
fd83c5e656 Merge pull request #2790 from ioito/hotfix/qx-dbinstance-sku-policy
hotfix: avolid auth for yunionmeta dbinstance_skus
2019-09-11 21:48:21 +08:00
Rain
3211230a86 add interface fetch resources of snats and dnats
snat network show

check sourcecidr is available when creating snat

add natgateway, snattable, dnattable to compute system resources
2019-09-07 18:48:35 +08:00
ioito
2dd60a7362 hotfix: avolid auth for yunionmeta dbinstance_skus 2019-09-07 16:01:20 +08:00
ioito
bcd9622219 fix: networkinterfaces belong system resource 2019-09-05 14:47:23 +08:00
Qiu Jian
77c4a53059 feature: 1. ak/sk auth support 2. a full feature s3gateway works with
Cyberduck

注意:以下两个文件的修改还未被官方合并,所以下次make
mod的时候会被覆盖,需要注意checkout恢复:

vendor/github.com/Azure/azure-sdk-for-go/storage/blockblob.go
vendor/github.com/tencentyun/cos-go-sdk-v5/object_part.go
2019-08-30 00:12:39 +08:00
Yousong Zhou
8d0e12027a policy: 将lb集群相关资源归入系统资源类 2019-08-26 07:38:41 +00:00
Qiu Jian
a177f8c2af fix: use policy match weight to override less specific policy 2019-08-23 21:14:47 +08:00
Zexi
dfc92a66eb schedtags: support scope 2019-08-23 13:35:58 +08:00
Qiu Jian
c938da9edd fix: adjust default policies for system resources 2019-08-05 18:56:05 +08:00
Qiu Jian
fea61697e9 fix: allow turn off non-default domain projects 2019-07-27 15:52:02 +08:00
Qiu Jian
c18359def4 fix: role assignments list should include matched policies 2019-07-25 02:26:39 +08:00
Qiu Jian
133c721f02 fix: add default network project privileges 2019-07-09 14:59:19 +08:00
Jian Qiu
b0605113da fix: misc bugfxi for quotas (#1290) 2019-06-18 22:51:38 +08:00
Qiu Jian
2dd12cc14f fix: misc 2019-06-18 10:32:43 +08:00
Qiu Jian
f414d4090a fix: 1. project add user/group rpc paramter error 2. secgrouprule 403 3. 2019-06-13 14:08:59 +08:00
Qiu Jian
9670446a21 fix: 1. zone/region capability containts by domain 2. yunionconf query
scope fixes
2019-06-11 01:31:59 +08:00
Jian Qiu
40c4bd2a0b fix: 1. 403 on zone/capabilities, parameters (#1097)
* fix: 1. 403 on zone/capabilities, parameters

* fix keystone authenticate error

* fix: endpoint add type console
2019-06-09 00:52:58 +08:00
Qiu Jian
74c6a131a4 fix: numerous incorrect privilege issues 2019-06-06 03:23:03 +08:00
Qiu Jian
292c2a141c fix: bugs in scope support 2019-06-04 23:27:55 +08:00
Qiu Jian
a6207a8ac7 hotfix: support scope list filter, resolve filter conflict 2019-06-04 23:27:55 +08:00
Jian Qiu
72c13b8e39 3level priviliges bufixes 20190603 (#1036) 2019-06-03 12:30:58 +08:00
Jian Qiu
81b9cac556 fix: misc 3level priviliges bugfixes (#1026)
* fix: misc 3level priviliges bugfixes

* misc bugfixes

* misc bugfixes
2019-06-02 08:05:11 +08:00
Jian Qiu
bff3ba9b16 fix: keystone fernet setup bugs and other bugs (#1022) 2019-06-01 17:31:20 +08:00
Qiu Jian
e112c4f567 minor fixes 2019-05-31 14:10:56 +08:00
Qiu Jian
b8e6598ac6 fix: add keystone initialization procedures 2019-05-31 14:01:41 +08:00
Qiu Jian
9d3cce46a8 feature: keystone support phase 1 2019-05-31 14:00:58 +08:00
Qiu Jian
d8e492ee5a misc fixes 2019-05-31 13:56:02 +08:00
Qiu Jian
b7027934db feature: 3-level policies, system/domain/project 2019-05-31 13:56:02 +08:00
Qiu Jian
afabf0396f fix: add keystone initialization procedures 2019-05-31 13:52:12 +08:00
Qiu Jian
93e9d9a34b feature: keystone support phase 1 2019-05-31 13:52:12 +08:00
Qiu Jian
2efc5e641e fix: add keystone initialization procedures 2019-05-17 13:54:29 +08:00
Qiu Jian
5a660987e6 feature: keystone support phase 1 2019-05-17 13:53:45 +08:00
Qiu Jian
5e4ac465d5 remove comments 2019-04-17 09:29:58 +08:00
Qiu Jian
037d37d0e3 fix: pkg/cloudcommon/policy/ go test failure 2019-04-17 09:29:58 +08:00
Zexi
db0e303798 make 'go test ./...' pass 2019-04-15 19:54:46 +08:00
Jian Qiu
0a0a44b48d fix: anonymous user may have admin priviliges (#124) 2019-03-31 15:24:41 +08:00
Qiu Jian
fefdb706f3 fix: the default policy for actions not matching any rule defaults to allow 2019-03-29 20:45:38 +08:00
Qiu Jian
004d9b6f95 update copyright headers of all source 2019-03-29 14:47:48 +08:00
屈轩
56f8d57428 添加普通用户查看metadata权限 2019-03-22 11:54:33 +08:00
Qiu Jian
78faed91a4 fix: SyncOnce should invalidate policy cache 2019-03-21 11:29:30 +08:00
Qiu Jian
9d966e9959 minor updates 2019-03-21 01:06:33 +08:00
Qiu Jian
06ae94ebe3 fix: simplify rbac policy condition to match projects and roles 2019-03-21 01:03:51 +08:00
Yousong Zhou
8fe4f2ec98 treewide: group imports with goimports
./goimports -w -local yunion.io/x/onecloud/ -corp yunion.io/x/ $GOPATH/src/yunion.io/x/onecloud/{cmd,pkg}
2019-03-13 10:46:12 +00:00
Yousong Zhou
07f98779ad treewide: s/HasSystemAdminPrivelege/HasSystemAdminPrivilege/g 2019-03-12 03:39:20 +00:00
Qiu Jian
4c6f196ec5 Merge branch 'release/2.6.0' of ssh://git.yunion.io/~qiujian/onecloud into feature/qj-image-p2p-distribution
Conflicts:
	pkg/appsrv/appsrv.go
	pkg/cloudcommon/policy/defaults.go
	pkg/util/sysutils/sysutils.go
2019-02-15 22:46:01 +08:00