Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Always build synthetic access policy #4074

Merged
merged 2 commits into from Mar 1, 2024

Conversation

codyebberson
Copy link
Member

This is prep refactoring for future where AccessPolicy is required for all ProjectMembership

Currently, Medplum has the notion of a "null access policy", which is the source of confusion and abuse. We always recommend that all users have an access policy assigned to prevent that confusion.

This PR is performing some prep refactoring to always build a "synthetic" access policy, so even if an access policy is not explicitly defined, an "effective" access policy is available.

There will be additional future work to fill this out:

  • Default access policies to alleviate the burden of writing access policies from scratch
  • Migration tools to ensure all project memberships have an access policy
  • And then eventually the change to require an access policy

@codyebberson codyebberson requested a review from a team as a code owner February 29, 2024 23:59
Copy link

vercel bot commented Feb 29, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
medplum-provider ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 1, 2024 0:07am
3 Ignored Deployments
Name Status Preview Comments Updated (UTC)
medplum-app ⬜️ Ignored (Inspect) Visit Preview Mar 1, 2024 0:07am
medplum-storybook ⬜️ Ignored (Inspect) Visit Preview Mar 1, 2024 0:07am
medplum-www ⬜️ Ignored (Inspect) Visit Preview Mar 1, 2024 0:07am

Copy link

github-actions bot commented Mar 1, 2024

Messages
📖 @medplum/core: 169.5 kB
📖 @medplum/react: 353.2 kB

Generated by 🚫 dangerJS against c570413

@codyebberson codyebberson merged commit 1c21c75 into main Mar 1, 2024
19 of 23 checks passed
@codyebberson codyebberson deleted the cody-always-build-synthetic-access-policy branch March 1, 2024 00:53
medplumbot added a commit that referenced this pull request Mar 1, 2024
Always build synthetic access policy (#4074)
Upgrade to Chromatic 11 (#4071)
Fix setting query timeout (#4072)
Enhance batch logs (#4062)
Resource table profile support (#4039)
Sample bot to parse ORM messages (#4068)
fix(ci): `npm ci` before tests (#4067)
refactor(ci): parallelize `eslint` and running tests in CI (#4063)
fix(ci): remove attempt to comment on PR (#4056)
Add callout about using AuditEvent as Subscription criteria (#4044)
Clarify in and ni operators for filter search param (#4050)
@medplumbot medplumbot mentioned this pull request Mar 1, 2024
@reshmakh reshmakh added this to the February 29th, 2024 milestone Mar 1, 2024
codyebberson pushed a commit that referenced this pull request Mar 1, 2024
Always build synthetic access policy (#4074)
Upgrade to Chromatic 11 (#4071)
Fix setting query timeout (#4072)
Enhance batch logs (#4062)
Resource table profile support (#4039)
Sample bot to parse ORM messages (#4068)
fix(ci): `npm ci` before tests (#4067)
refactor(ci): parallelize `eslint` and running tests in CI (#4063)
fix(ci): remove attempt to comment on PR (#4056)
Add callout about using AuditEvent as Subscription criteria (#4044)
Clarify in and ni operators for filter search param (#4050)
github-merge-queue bot pushed a commit that referenced this pull request Mar 1, 2024
Always build synthetic access policy (#4074)
Upgrade to Chromatic 11 (#4071)
Fix setting query timeout (#4072)
Enhance batch logs (#4062)
Resource table profile support (#4039)
Sample bot to parse ORM messages (#4068)
fix(ci): `npm ci` before tests (#4067)
refactor(ci): parallelize `eslint` and running tests in CI (#4063)
fix(ci): remove attempt to comment on PR (#4056)
Add callout about using AuditEvent as Subscription criteria (#4044)
Clarify in and ni operators for filter search param (#4050)
@reshmakh reshmakh added auth Authentication and authorization features and fixes security Security best practices and enhancements labels Mar 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auth Authentication and authorization features and fixes security Security best practices and enhancements
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

None yet

3 participants