Dan
4a8b07e98d
Removing two fields from user table that were not used (uid, name)
...
Request email from open id clients, as this would provide a handy way to uniquely reference users when assigning to groups.
During Login do a lookup on email if possible -- so that permissions assignments based on email can be connected when sigining in through openid.
Don't use "open_id" for the service name on user accounts, use the iss string provided through open id, this will allow us to support more than one open id platform.
Update the KeyCloak configuration so it is able to return email addresses for users -- which will make permission assignment easier in the future.
Removed several unused commands in the user_service class.
2022-12-12 15:43:19 -05:00
jasquat
cc95973552
pyl w/ burnettk
2022-12-09 17:30:14 -05:00
jasquat
e5c72eb87b
update staging configs to allow env var overrides w/ burnettk
2022-12-09 17:28:57 -05:00
jasquat
cb143d3201
added secret verification to webhook endpoint w/ burnettk
2022-12-09 16:51:00 -05:00
jasquat
7db3101ff1
cleaned up the git service and expanded the api git hook w/ burnettk
2022-12-09 15:01:55 -05:00
jasquat
4878d2329b
mypy w/ burnettk cullerton
2022-12-08 17:12:19 -05:00
jasquat
d50d95a49c
added git creds for pushing on publish w/ burnettk cullerton
2022-12-08 16:39:23 -05:00
jasquat
b54378a9fc
merged in main and resolved conflicts w/ burnettk cullerton
2022-12-08 15:31:25 -05:00
jasquat
cee726e8b0
pyl passes
2022-12-08 13:47:30 -05:00
jasquat
d4ae1d6d37
syntax fix w/ burnettk
2022-12-07 14:42:13 -05:00
jasquat
9ff80f6aff
remove staging py config file in favor of terraform configs w/ burnettk
2022-12-07 14:40:04 -05:00
jasquat
7c660f874f
moved some configs from deploy scripts to terraform env config w/ burnettk
2022-12-07 14:18:49 -05:00
jasquat
7595758548
rename terraform configs from rb to py w/ burnettk
2022-12-07 14:09:33 -05:00
mike cullerton
87e105e189
Add comment about the new environment variable
2022-12-07 14:00:11 -05:00
Dan
bab489fa7b
Merge branch 'main' into feature/create_containers
2022-12-06 18:06:09 -05:00
mike cullerton
8b5e5dc864
Merge branch 'main' into feature/git-integration
...
# Conflicts:
# spiffworkflow-backend/tests/spiffworkflow_backend/integration/test_process_api.py
2022-12-06 16:27:36 -05:00
jasquat
2a03b33156
updated terraform permissions to match development better w/ burnettk
2022-12-06 16:20:00 -05:00
mike cullerton
ee166c4e1c
First pass at git integration
2022-12-06 15:31:03 -05:00
jasquat
e889bfc716
more api cleanup w/ burnettk
2022-12-05 16:35:20 -05:00
jasquat
bc7c5920b2
cleaned up more api routes for permissions w/ burnettk
2022-12-05 16:06:08 -05:00
jasquat
8b0717be2d
updated tasks endpoint to task-data for easier permission setting w/ burnettk
2022-12-05 14:56:55 -05:00
Dan
3a09b45765
running py_pl -- mainly reordering imports.
2022-12-05 12:29:19 -05:00
Dan
43bc82163e
Setting things up so it's easy to switch databases using a local configuration file (still works with environment variables)
...
Swtiched from a "joinedload" to a "selectinload" which removes a problem with groupby columns in Postgres and sqlite. (https://docs.sqlalchemy.org/en/14/orm/loading_relationships.html#selectin-eager-loading )
2022-12-05 12:05:52 -05:00
Dan
1e86345a33
Fixes based off KB's super kind review.
...
-------
* Remove unnecessary packages from dockerfile for the demo-connect proxy.
* Rename an environment variable that mentioned Status.im in what is now a generic connector.
* Fixed a spelling mistake.
2022-12-05 10:46:26 -05:00
Dan
f01cd57d24
Reorder config imports so that instance config is dead last - and can override everything else.
...
Updated docker-compose for running a demo.
run_pyl fixes
2022-12-01 14:13:22 -05:00
Dan
b9fbedc63c
Adding a demo permissions file.
2022-12-01 13:29:57 -05:00
Dan
e8cbe1df84
A little cleanup of the ui
...
Don't check authorization on static assets
Do not require unique username on user table (uniqueness check is on the service and service id composite.)
2022-12-01 12:12:37 -05:00
Dan
2082c113b2
Not all open id systems have realms like KeyCloak does -- so removing this in favor of setting just one value - which is the base url of the openid system -- which will work across all openid systems.
2022-11-30 11:51:20 -05:00
Dan
3ade3e5b99
Adding a blueprint for openid - a very lightweight embedded authentication system to make it eaiser to try out SpiffWorkflow when you don't have openID set up with Google etal.
...
Removing all calls to open id's user_info endpoint - as these are unncessiary.
Adding a users section to the permission files -- so we can handle all user/group/permissions in one file when needed.
There was a very confusing is_admin function on the user model that needed killin.
2022-11-30 11:32:55 -05:00
jasquat
0eeb096d43
added script to save process instance metadata and fixed permissions issue w/ burnettk cullerton
2022-11-28 15:26:50 -05:00
burnettk
9938060acc
get rid of Project Lead group
2022-11-28 12:03:49 -05:00
burnettk
8053049c17
everybody gets access to read processes
2022-11-27 21:30:35 -05:00
burnettk
a0cc377df8
put sasha and manuchehr in demo group
2022-11-27 21:28:51 -05:00
burnettk
0ae1a5e89e
make sasha, harmeet, manuchehr, and admin have desired permissions for demo
2022-11-27 21:07:20 -05:00
Dan
a9a5e2fff9
add demo group access to the customer-contracts to give us 5 tiles for the dmeo.
2022-11-25 17:23:56 -05:00
burnettk
1e8636c2c4
no global read since that gives configuration as well
2022-11-25 14:37:50 -05:00
burnettk
fa5c7127b5
do not allow starting vendor invoice approval process for demo users
2022-11-25 13:32:44 -05:00
Dan
0fcf2da52a
Change permissions per request -- want everyone to have access to 4 process models.
2022-11-25 13:31:17 -05:00
Dan
b3e6da9ec3
Change permissions per request -- want everyone to have access to 4 process models.
2022-11-25 13:31:01 -05:00
Dan
843f844e56
Change permissions changed from vendor to core-contributor for everyone.
2022-11-25 12:57:23 -05:00
burnettk
6643e9b711
add fin1, lead1, and Tasks actioned by me to Tasks completed by me
2022-11-24 10:38:25 -05:00
burnettk
6e8eb256d5
update permissions per feedback in demo
2022-11-23 10:49:26 -05:00
burnettk
9d518c8070
add perm to process instance report list
2022-11-22 18:16:01 -05:00
jasquat
4143aae16b
some more perm updates for core user w/ burnettk
2022-11-22 17:38:39 -05:00
jasquat
9f3dae60a3
give core user access to instance tasks w/ burnettk
2022-11-22 17:22:57 -05:00
jasquat
5dbca5c349
filter process models based on user permissions on the backend if specified w/ burnettk
2022-11-22 16:21:16 -05:00
jasquat
e5e6226bb9
created new users for keycloak and fixed some permissions for core user w/ burnettk cullerton
2022-11-22 13:01:08 -05:00
jasquat
77ff18a85c
pyl is passing w/ burnettk cullerton
2022-11-18 16:45:44 -05:00
mike cullerton
576d60e41d
precommit
2022-11-18 15:50:20 -05:00
jasquat
ab89f905f0
added development permission for test user w/ burnettk cullerton
2022-11-16 12:57:17 -05:00
