root [Thu, 2 Dec 2010 23:17:44 +0000 (18:17 -0500)]
Merge commit 'origin/master'
Thierry Parmentelat [Thu, 2 Dec 2010 23:11:00 +0000 (00:11 +0100)]
Merge branch 'master' of ssh://git.onelab.eu/git/plcapi
Thierry Parmentelat [Thu, 2 Dec 2010 23:10:48 +0000 (00:10 +0100)]
move sliverauth-related tags from db-config.d to accessors - fixed roles
S.Çağlar Onur [Thu, 2 Dec 2010 20:00:28 +0000 (15:00 -0500)]
add notification support
Thierry Parmentelat [Wed, 1 Dec 2010 16:48:43 +0000 (17:48 +0100)]
Setting tag plcapi-5.0-19
tag permissions system based on roles and not min_role_ids
accessors simplified accordingly (no more min_role_id)
new methods AddRoleToTagType and DeleteRoleFromTagType
accessor-related tagtypes are created sooner, and enforced
cleaned up redundancy between db-config.d and accessors
Thierry Parmentelat [Wed, 1 Dec 2010 16:01:54 +0000 (17:01 +0100)]
cleanup accessors
Thierry Parmentelat [Wed, 1 Dec 2010 14:44:49 +0000 (15:44 +0100)]
define_accessors accepts a list of classes if needed
service plc start accessors ensures consistency b/w the accessors
definition and the tag_types in the db
revised std accessors accordingly
Thierry Parmentelat [Wed, 1 Dec 2010 14:42:38 +0000 (15:42 +0100)]
tweaked message
Thierry Parmentelat [Wed, 1 Dec 2010 14:42:23 +0000 (15:42 +0100)]
del svn kwds
Thierry Parmentelat [Tue, 30 Nov 2010 18:17:12 +0000 (19:17 +0100)]
propagate caller in more places
node can change its own tag
protect for when caller does not have 'roles'
Thierry Parmentelat [Tue, 30 Nov 2010 17:51:19 +0000 (18:51 +0100)]
propagate caller when a method calls another method
Thierry Parmentelat [Tue, 30 Nov 2010 15:29:06 +0000 (16:29 +0100)]
ignoring tags
Thierry Parmentelat [Tue, 30 Nov 2010 15:26:20 +0000 (16:26 +0100)]
add node role to the 3 tags used (and possibly tweaked) by GetNodeFlavour
Thierry Parmentelat [Tue, 30 Nov 2010 15:25:54 +0000 (16:25 +0100)]
del svn kwds
Thierry Parmentelat [Tue, 30 Nov 2010 14:16:51 +0000 (15:16 +0100)]
added comment on how to modify accessors
Thierry Parmentelat [Tue, 30 Nov 2010 14:16:23 +0000 (15:16 +0100)]
missing import
Thierry Parmentelat [Tue, 30 Nov 2010 13:48:08 +0000 (14:48 +0100)]
cleanup tag types definition b/w db-config.d and accessors
Thierry Parmentelat [Tue, 30 Nov 2010 13:38:40 +0000 (14:38 +0100)]
plc.d/accessors now created the tagtype for all defined accessors
Thierry Parmentelat [Tue, 30 Nov 2010 13:36:04 +0000 (14:36 +0100)]
plc.d/accessors now created the tagtype for all defined accessors
Thierry Parmentelat [Tue, 30 Nov 2010 10:14:53 +0000 (11:14 +0100)]
again
Thierry Parmentelat [Tue, 30 Nov 2010 10:09:23 +0000 (11:09 +0100)]
fix fix
Thierry Parmentelat [Tue, 30 Nov 2010 10:07:27 +0000 (11:07 +0100)]
retrieve tag_type needed for caller_may_write_tag
Thierry Parmentelat [Mon, 29 Nov 2010 15:23:13 +0000 (16:23 +0100)]
svn-keywords
Thierry Parmentelat [Mon, 29 Nov 2010 15:22:58 +0000 (16:22 +0100)]
new step 'accessors' in the 'service plc start'
this ensures all the tagtypes mentioned in accessors are created
Thierry Parmentelat [Mon, 29 Nov 2010 14:53:35 +0000 (15:53 +0100)]
svn keywords
Thierry Parmentelat [Mon, 29 Nov 2010 10:02:37 +0000 (11:02 +0100)]
force import of AuthorizeHelpers
Thierry Parmentelat [Mon, 29 Nov 2010 10:02:14 +0000 (11:02 +0100)]
remove svn keywords
Thierry Parmentelat [Sun, 28 Nov 2010 16:29:07 +0000 (17:29 +0100)]
always invoke caller_my_access_tag
Thierry Parmentelat [Sun, 28 Nov 2010 16:28:49 +0000 (17:28 +0100)]
removed svn keywords
Thierry Parmentelat [Fri, 26 Nov 2010 08:28:17 +0000 (09:28 +0100)]
add missing imports
Thierry Parmentelat [Fri, 26 Nov 2010 06:57:18 +0000 (07:57 +0100)]
oops - wrong identation
Thierry Parmentelat [Thu, 25 Nov 2010 17:41:04 +0000 (18:41 +0100)]
all tag types use permission helpers in AuthorizeHelpers
accessors properly checked as well
Thierry Parmentelat [Thu, 25 Nov 2010 15:06:28 +0000 (16:06 +0100)]
permission checking on node tags factorized in Node.caller_may_write_tag
Thierry Parmentelat [Thu, 25 Nov 2010 15:05:34 +0000 (16:05 +0100)]
locate_or_create_tag returns tag_type, and not tag_type_id anymore
accessors are now fully type-checked
accessors to use the caller_may_write_tag method if exists
Thierry Parmentelat [Thu, 25 Nov 2010 15:02:58 +0000 (16:02 +0100)]
authentication exception a bit more verbose
Thierry Parmentelat [Thu, 25 Nov 2010 14:59:17 +0000 (15:59 +0100)]
tweak Accessors_site template to mentino person_roles
Thierry Parmentelat [Thu, 25 Nov 2010 14:58:41 +0000 (15:58 +0100)]
cosmetic
Thierry Parmentelat [Wed, 24 Nov 2010 19:45:13 +0000 (20:45 +0100)]
don't sync remote site local accessors
Thierry Parmentelat [Wed, 24 Nov 2010 19:01:23 +0000 (20:01 +0100)]
review (and fix) the way we retrieve the subject object
Thierry Parmentelat [Wed, 24 Nov 2010 09:55:54 +0000 (10:55 +0100)]
protect GetPersonTags to avoid disclosing person emails
Thierry Parmentelat [Tue, 23 Nov 2010 21:35:36 +0000 (22:35 +0100)]
comment in GetPersons
Thierry Parmentelat [Tue, 23 Nov 2010 21:24:23 +0000 (22:24 +0100)]
comment on define_accessors
Thierry Parmentelat [Tue, 23 Nov 2010 18:20:30 +0000 (19:20 +0100)]
add a note in GetPersons about a possible privacy leak
Thierry Parmentelat [Tue, 23 Nov 2010 15:04:43 +0000 (16:04 +0100)]
get the down migration right
Thierry Parmentelat [Tue, 23 Nov 2010 08:47:45 +0000 (09:47 +0100)]
fix duplicate arg in helpers
Thierry Parmentelat [Tue, 23 Nov 2010 06:43:33 +0000 (07:43 +0100)]
bugfix
Thierry Parmentelat [Mon, 22 Nov 2010 23:56:22 +0000 (00:56 +0100)]
committed un unsaved file
Thierry Parmentelat [Mon, 22 Nov 2010 23:52:26 +0000 (00:52 +0100)]
added doc on migration
Thierry Parmentelat [Mon, 22 Nov 2010 22:25:01 +0000 (23:25 +0100)]
default for get_roles in the accessors factory is all_roles
Thierry Parmentelat [Mon, 22 Nov 2010 22:17:57 +0000 (23:17 +0100)]
add/update/delete slice tags should be fine
Thierry Parmentelat [Sun, 21 Nov 2010 21:24:17 +0000 (22:24 +0100)]
give more details on permission denied
Thierry Parmentelat [Sun, 21 Nov 2010 21:21:57 +0000 (22:21 +0100)]
bugfix, don't use methods...
Thierry Parmentelat [Fri, 19 Nov 2010 16:05:29 +0000 (17:05 +0100)]
Merge branch 'master' of ssh://git.onelab.eu/git/plcapi
Thierry Parmentelat [Fri, 19 Nov 2010 16:05:23 +0000 (17:05 +0100)]
accessors and db-config.d tags roughly OK
Barış Metin [Fri, 19 Nov 2010 15:33:00 +0000 (16:33 +0100)]
fix indent error
Thierry Parmentelat [Fri, 19 Nov 2010 14:39:10 +0000 (15:39 +0100)]
Merge branch 'master' of ssh://git.onelab.eu/git/plcapi
Thierry Parmentelat [Fri, 19 Nov 2010 14:38:11 +0000 (15:38 +0100)]
first draft of slice tags authorization in AddSliceTag
Barış Metin [Fri, 19 Nov 2010 14:37:20 +0000 (15:37 +0100)]
add enable_hmac slice tag accessor
Thierry Parmentelat [Fri, 19 Nov 2010 13:27:54 +0000 (14:27 +0100)]
.gitignore
Thierry Parmentelat [Fri, 19 Nov 2010 13:25:53 +0000 (14:25 +0100)]
show tagname when permission is denied
Thierry Parmentelat [Fri, 19 Nov 2010 11:25:28 +0000 (12:25 +0100)]
oops - missing file
Thierry Parmentelat [Thu, 18 Nov 2010 19:16:19 +0000 (20:16 +0100)]
reviewing the tags permission system
tag_types don't have a min_role_id anymore but a set of roles
new methods AddRoleToTagType and DeleteRoleFromTagType to handle that
new file PLC/AuthorizeHelpers.py has helpers to implement authorizations
this is a checkpoint commit - remaining todo:
- slice tags methods are unchanged yet
- accessors and factory still use min_role_id
Thierry Parmentelat [Thu, 18 Nov 2010 09:23:33 +0000 (10:23 +0100)]
Merge branch 'master' of ssh://git.onelab.eu/git/plcapi
Thierry Parmentelat [Thu, 18 Nov 2010 09:23:14 +0000 (10:23 +0100)]
cleanup more svn keywords
root [Wed, 17 Nov 2010 21:52:56 +0000 (22:52 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Wed, 17 Nov 2010 21:49:50 +0000 (16:49 -0500)]
AuthMethod is a must so return if it's missing
root [Wed, 17 Nov 2010 21:43:54 +0000 (22:43 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Wed, 17 Nov 2010 21:43:45 +0000 (16:43 -0500)]
support other Auth types
root [Wed, 17 Nov 2010 21:25:53 +0000 (22:25 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Wed, 17 Nov 2010 21:23:03 +0000 (16:23 -0500)]
use the same log file with spec
root [Wed, 17 Nov 2010 21:22:55 +0000 (22:22 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Wed, 17 Nov 2010 21:21:01 +0000 (16:21 -0500)]
handle KeyError exception for now
root [Wed, 17 Nov 2010 20:58:52 +0000 (21:58 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Wed, 17 Nov 2010 20:57:41 +0000 (15:57 -0500)]
fix typo
root [Wed, 17 Nov 2010 20:55:55 +0000 (21:55 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Wed, 17 Nov 2010 20:55:14 +0000 (15:55 -0500)]
use Username while calculating the key
S.Çağlar Onur [Wed, 17 Nov 2010 20:54:08 +0000 (15:54 -0500)]
use Username while calculating the key
root [Wed, 17 Nov 2010 18:32:09 +0000 (19:32 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Wed, 17 Nov 2010 18:30:05 +0000 (13:30 -0500)]
python-memcache responds to incr on non-existent keys raising a ValueError. Cmemcache returns None. Handle both cases
Barış Metin [Tue, 16 Nov 2010 23:30:34 +0000 (00:30 +0100)]
add new file to the package
root [Tue, 16 Nov 2010 21:44:00 +0000 (22:44 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Tue, 16 Nov 2010 21:42:52 +0000 (16:42 -0500)]
add whitelist
root [Tue, 16 Nov 2010 20:01:55 +0000 (21:01 +0100)]
Merge commit 'origin/master'
S.Çağlar Onur [Tue, 16 Nov 2010 19:59:16 +0000 (14:59 -0500)]
merge ratelimiting support from memcache branch
Barış Metin [Tue, 16 Nov 2010 10:15:24 +0000 (11:15 +0100)]
fix another typo
Sapan Bhatia [Mon, 15 Nov 2010 23:15:34 +0000 (18:15 -0500)]
This function is needed to cache the results of API calls, which for a godforsaken reason cannot be pickled.
root [Mon, 15 Nov 2010 22:50:02 +0000 (23:50 +0100)]
Merge commit 'origin/master'
Thierry Parmentelat [Mon, 15 Nov 2010 09:20:01 +0000 (10:20 +0100)]
trashed svn keywords
Barış Metin [Thu, 11 Nov 2010 13:35:04 +0000 (14:35 +0100)]
also fix error message
Tony Mack [Wed, 10 Nov 2010 21:06:11 +0000 (16:06 -0500)]
Fix typo
Tony Mack [Wed, 10 Nov 2010 20:42:22 +0000 (15:42 -0500)]
Use PLC.Person.can_update() to authorize. fix name error.
Stephen Soltesz [Tue, 9 Nov 2010 15:22:20 +0000 (10:22 -0500)]
Evidently, not all versions of DRAC are supported, such as the Modular Chassis
which expects strings to identify nodes rather than what our API supports
which is integers.
Daniel Hokka Zakrisson [Sun, 17 Oct 2010 00:16:48 +0000 (20:16 -0400)]
Don't descend into php directory, there's nothing there.
Daniel Hokka Zakrisson [Sun, 17 Oct 2010 00:10:27 +0000 (20:10 -0400)]
Skip generating static list of API calls, just send them to the API.
Daniel Hokka Zakrisson [Sat, 16 Oct 2010 23:10:31 +0000 (19:10 -0400)]
Fix version output when missing.
Daniel Hokka Zakrisson [Sat, 16 Oct 2010 23:10:05 +0000 (19:10 -0400)]
Already scoped properly.
Daniel Hokka Zakrisson [Sat, 16 Oct 2010 22:39:31 +0000 (18:39 -0400)]
Fix auth extensibility.
Daniel Hokka Zakrisson [Sat, 16 Oct 2010 22:30:54 +0000 (18:30 -0400)]
Remember to insert the version.
Daniel Hokka Zakrisson [Sat, 16 Oct 2010 22:20:36 +0000 (18:20 -0400)]
Cleanup old targets in Makefile.
Daniel Hokka Zakrisson [Sat, 16 Oct 2010 22:10:25 +0000 (18:10 -0400)]
Create extensions directory.