Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Introduce "bypass", "one_factor", "two_factor" and "deny" ACL rules #289

Merged
merged 4 commits into from Nov 17, 2018
Merged

Introduce "bypass", "one_factor", "two_factor" and "deny" ACL rules #289

merged 4 commits into from Nov 17, 2018

Commits on Nov 17, 2018

  1. Integrate more policy options in ACL rules. 

    The possible values for ACL policies are now: bypass, one_factor, two_factor,
deny.

This change also deprecate auth_methods because the method is now associated
directly to a resource in the ACLs instead of a domain.
    @clems4ever
    clems4ever committed Nov 17, 2018
    Configuration menu
    Copy the full SHA
    9fc5554 View commit details
    Browse the repository at this point in the history

  2. Create a docker-compose.dev.yml to reproduce integration test cases.

    @clems4ever
    clems4ever committed Nov 17, 2018
    Configuration menu
    Copy the full SHA
    2bc650f View commit details
    Browse the repository at this point in the history

  3. [BREAKING] Flatten the ACL rules to enable some use cases. 

    With previous configuration format rules were not ordered between groups and
thus not predictable. Also in some cases `any` must have been a higher
precedence than `groups`. Flattening the rules let the user apply whatever
policy he can think of.

When several rules match the (subject, domain, resource), the first one is
applied.

NOTE: This commit changed the format for declaring ACLs. Be sure to update
your configuration file before upgrading.
    @clems4ever
    clems4ever committed Nov 17, 2018
    Configuration menu
    Copy the full SHA
    97bfafb View commit details
    Browse the repository at this point in the history

  4. Introduce Subject and Object in authorization module.

    @clems4ever
    clems4ever committed Nov 17, 2018
    Configuration menu
    Copy the full SHA
    b53d16d View commit details
    Browse the repository at this point in the history