Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(public-files): check authz/acl field, then hit arborist as anon … #653

Merged
merged 8 commits into from
Jun 28, 2019
Merged

feat(public-files): check authz/acl field, then hit arborist as anon … #653

Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
081254b
feat(public-files): check authz/acl field, then hit arborist as anon …
Avantol13 Jun 27, 2019
ca23962
fix(public-files): make it a class method to access authorization check
Avantol13 Jun 27, 2019
e8d3a58
chore(revert): just check for /open
Avantol13 Jun 27, 2019
880e6c2
fix(revert): undo changes
Avantol13 Jun 27, 2019
de85db0
chore(inline): inline function only called one place
Avantol13 Jun 28, 2019
1283bbb
fix(indexd): only check authz for if its public, don't include in pre…
Avantol13 Jun 28, 2019
55547ff
fix(acls): extend acls by anything in authz field
Avantol13 Jun 28, 2019
e0af39e
fix(acls): extend correctly
Avantol13 Jun 28, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 3 additions & 6 deletions fence/blueprints/data/indexd.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -365,7 +365,9 @@ def metadata(self):

@cached_property
def public(self):
return check_public(self.set_acls)
authz_resources = list(self.set_acls)
authz_resources.extend(self.index_document.get("authz", []))
return "*" in authz_resources or "/open" in authz_resources

@login_required({"data"})
def check_authorization(self, action):
Expand Down Expand Up @@ -827,8 +829,3 @@ def filter_auth_ids(action, list_auth_ids):
if checked_permission in values:
authorized_dbgaps.append(key)
return authorized_dbgaps


def check_public(set_acls):
if "*" in set_acls:
return True