github.com/casbin/openstack-patron commits | Ecosyste.ms: OpenCollective

Improved AEM according to CmdIt's result, also removed the HTTP 413 error, because a "" string op should pass the access controls.

f6b43530c8b353f5d9728de79329aa350bd86254 authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that CmdIt crashes if the ops from myapi.txt has no elements.

cc0c78504884069a557cfce20668427808804a23 authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that CmdIt can't stop itself when getting work finished.

bb87246c7b54ebbb27a5a9f2e9ac099495a00437 authored over 9 years ago by hsluoyz <[email protected]>

Now path_info's "GET" paramters can be templated as "%VALUE%" in CmdIt.

f2a4a0c25292e836ac3cafaa4b24e93e1d011028 authored over 9 years ago by hsluoyz <[email protected]>

Added 5 new key_calls mappings for CmdIt, also simplied the inner_action representation using the action word.

85fc9d78b81e7c50f75d4784d0cd0a064159654b authored over 9 years ago by hsluoyz <[email protected]>

Now "path_to_op" mappings can be automatically generated by cmd-integration-test.py, it can be directly used in AEM.

1f297b014d1c46b9855d07f6cb28b96ba1e875ab authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug in cmd-integration-test.py that some additional API log lines are not correctly positioned when it's printed.

09da4d947a12518557765e6807a52cb6e08124e5 authored over 9 years ago by hsluoyz <[email protected]>

Now cmd-integration-test.py can track the myapi.txt log file's modifications, used to extract the op.

e3711e752ae95e143a850479a3499e0bf142135f authored over 9 years ago by hsluoyz <[email protected]>

Made "path_info" in nova-cmd-integration-test.py templated through the same way used on AEM.

b08ee1183266d749344759a88e15ad149ef2486a authored over 9 years ago by hsluoyz <[email protected]>

Functionized "get_template_path_info" parts in AEM.

a78e37f6ad355ef7a75d56d241bb23d8a1b9eedd authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that novaclient doesn't return execution time when occurs exception, also adopts a new time calculation way based on time.time().

768362c9e2499e8e9cb9b690ba2b31789d32fa1d authored over 9 years ago by hsluoyz <[email protected]>

Added "Command Error" type for nova-cmd-integration-test.py, also added debug log output to "/root/cmd-integration-test-debuglog.txt".

ca04cd7cb268d1d623c3a0c36df7f026ce9f6f95 authored over 9 years ago by hsluoyz <[email protected]>

Merged two test functions into single one in nova-cmd-integration-test.py.

77e09c77a945ad5e3eae6c8a04a5300d85b75b05 authored over 9 years ago by hsluoyz <[email protected]>

Now nova-cmd-integration-test.py script can show all path_infos for a command.

4579a39d67edb01a16c6eee598496461943f4534 authored over 9 years ago by hsluoyz <[email protected]>

Added "port" and "version" fields to AEM's path_to_op mappings.

6d56d1cef7ba7f1626637baf76468672d069bdcc authored over 9 years ago by hsluoyz <[email protected]>

Now all nova test commands' "path_info" can be successfully parsed out by nova-cmd-integration-test.py.

a93eb8f9b356701116d06a634f897eaa905809d6 authored over 9 years ago by hsluoyz <[email protected]>

Added dynamic generated ID's operations (like delete) in nova-cmd-integration-test.py.

a5718e74bf4c3454df5db9d7f0a6741adeb57799 authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug in nova-cmd-integration-test.py that some URLs with special chars are failed to be parsed.

7b78a7c1b6ba848ad95b5adfd72eb8d7d642c0a9 authored over 9 years ago by hsluoyz <[email protected]>

Fixed two bugs in nova-cmd-integration-test.py: 1) $SERVER_NAME macro is not replaced, 2) "nova --debug root-password" will halt.

3bb5fdd0c6549ab173332845a8c4fa336f6e72bc authored over 9 years ago by hsluoyz <[email protected]>

Added the get path_info tuple function for nova-cmd-integration-test.py, now this script can use "--debug" output to extract out the path_info that used by path_to_op mechanism in AEM.

3d1beec3179bcc4d92a6cd79ce04ac36a14f13cd authored over 9 years ago by hsluoyz <[email protected]>

Now the path_to_op function in AEM uses "template_path_info" generated by path_to_target function, also aggregate delete routine is added into path_to_op.

052cdebfaeee60d19774d2547fb84c49b58fc0c0 authored over 9 years ago by hsluoyz <[email protected]>

Added support for "nova root-password %INSTANCE_NAME%" command using expect script in nova-cmd-integration-test.py.

f3a1fa9fd4744022a94ee5911d39b36e0b351ec2 authored over 9 years ago by hsluoyz <[email protected]>

Added "Usage Error" and "Other Errors" display for nova-cmd-integration-test.py.

e4c839d0e3dfc2e2356df44a6be8385294386982 authored over 9 years ago by hsluoyz <[email protected]>

Updated image and secgroup names for nova-cmd-test.sh.

40f55f255304984f109aa77391f029e3753386aa authored over 9 years ago by hsluoyz <[email protected]>

Added "line-no" display and running from custom line function for nova-cmd-integration-test.py.

adce1a0445478c80524d5ccc1f23eb75acdbe373 authored over 9 years ago by hsluoyz <[email protected]>

Added the command no display for nova-cmd-integration-test.py.

29b35de7e04455a87d9572318c709eefcda4e358 authored over 9 years ago by hsluoyz <[email protected]>

If the mappings in AEM failed to find an op, we return the rare HTTP 412 error, to let the user know this is the error position.

004c48d23d584e2bdd857fa2a3d84b5f9536589b authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that most macros failed to be replaced in nova-cmd-integration-test.py.

1dcd911aca81e449a015a6b8893f13c13499f765 authored over 9 years ago by hsluoyz <[email protected]>

Added the macro replace function for nova-cmd-integration-test.py.

d42ae103fbd81b95db080fff0ffda277511b8e91 authored over 9 years ago by hsluoyz <[email protected]>

If the mappings in AEM failed to find an op, we return the rare HTTP 412 error, to let the user know this is the error position.

def19266e6b08c3cff89f57fb7dbe3ea674ad283 authored over 9 years ago by hsluoyz <[email protected]>

Renamed the nova cmd integration test file to python script.

6442a7fd8548fb7025a045a258bab4d17ddd660e authored over 9 years ago by hsluoyz <[email protected]>

Built an integeration test script for nova based on the original nova-cmd-test.sh.

a08abb3ce9df2735aa64343d7b69ba502342aa3a authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that default rule is not specified in multi-policy module, this will cause "nova show %INSTANCE_NAME%" to failure.

e92e6f6d1a541714bcbd64033d3f3e9d960a86db authored over 9 years ago by hsluoyz <[email protected]>

Got URL-to-op mappings sorted, duplicate-removed and formatted for AEM.

b5d55706709fef0352b0c9890ca5ff78cc76d31a authored over 9 years ago by hsluoyz <[email protected]>

Updated a new built-in policy named "enable.json", also modified "metadata.json" to be an example of our policy integration model.

72ea3ec284c1b067d8f457514420bf0f821dffd5 authored over 9 years ago by hsluoyz <[email protected]>

Modified patron setpolicy API to support 'built-in' Attribute in metadata.json.

8ebb88c6ebbcccc4bf46906413c005518a443b9e authored over 9 years ago by lwyeluo <[email protected]>

Improved the set-policy function handler to make it generate well-formated json.

261336c45efcb023d5247d9ddd5e57b930172d18 authored over 9 years ago by hsluoyz <[email protected]>

Added "built-in" field to AND, OR and NOT policy for the policy example.

826217b430cf50da187a034bb8acb2eda594ca28 authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug in multi-policy module that if empty metadata file is provided, patron will crash.

0550bf1e3a13808f85de1afbc678b1bba483f449 authored over 9 years ago by hsluoyz <[email protected]>

Modified patron setpolicy COMMAND and API to support user push their policy file.

745f8b0bd3838fd83a0b3101aa584b5ca828450f authored over 9 years ago by lwyeluo <[email protected]>

Fixed the bug that the example metadata.json file lacks a "name" field".

f10ebb7d443b31fb237d2c94b68bd5385bc18c97 authored over 9 years ago by hsluoyz <[email protected]>

Added the policy integration feature for multi-policy module, now multiple policies can be ORed, ANDed and NOTed, see the "metadata.json" for example.

cc4a88474f99efd89d454896f69c11d706009c27 authored over 9 years ago by hsluoyz <[email protected]>

Added the URL to op mapping mechanism (not finished) for AEM.

b733cf6ecc8247bd90449e18996d66991f4f06d9 authored over 9 years ago by puyangsky <[email protected]>

Moved get_adapter function from Enforcer to BaseAdapter in multi-policy module.

3444eee4cb9108f62feb19243659661bc898f65a authored over 9 years ago by hsluoyz <[email protected]>

Improved the code format of multi-policy module.

8728e859719391892b92238ac2c2877b065c6642 authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that "built-in" policy is not recognized as built-in in multi-policy module.

72013fc28dfa990fd030aeae06440476098cc425 authored over 9 years ago by hsluoyz <[email protected]>

Added the default metadata file for multi-policy module, if it is a new tenant, it will have a default metadata file that has only one built-in default policy.

af0d5c80c3a1bc98913901e54ece1c45a052fbea authored over 9 years ago by hsluoyz <[email protected]>

Added built-in policy mechanism into multi-policy module.

735d1521b009e32658fb0766d31f6d24ee84f357 authored over 9 years ago by hsluoyz <[email protected]>

Modified multi-policy module to load adapter classes dynamically.

7868c7d34740c9df4dfaa52936354f265c57a77c authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that multi-policy module crashed when specifying "all-pass-policy".

cd73e6f6ba457cba0e443ca3927e7fedabef5f09 authored over 9 years ago by hsluoyz <[email protected]>

Moved the load_rules function from Enforcer to BaseAdapter in multi-policy module.

bcc5f05ebc192c98705d0fdd4a0bacae7d4acf6e authored over 9 years ago by hsluoyz <[email protected]>

nova command line test bash file

7f43363c2e5e859c16b39327f7ed6c4e1cbc843f authored over 9 years ago by puyangsky <[email protected]>

Fixed a BUG that AEM got wrong project-id for WIPECACHE command.

a2b6e7a7363465914c06b0d9fef14f8d529e543e authored over 9 years ago by lwyeluo <[email protected]>

Added base class for all adapters in multi-policy module.

fe19dfb78c2e87028d08ca22068f2f15da5dec36 authored over 9 years ago by hsluoyz <[email protected]>

Renamed "Enforcer" to "Adapter" for multi-policy module.

03e2dc3c882d3e81106feef982d07d5213099ea0 authored over 9 years ago by hsluoyz <[email protected]>

Fixed the BUG for response the WIPECACHE command.

876b0d9c3afa81f08f51e5da53ad428c483b4c5b authored over 9 years ago by lwyeluo <[email protected]>

Added policy revocation for AEM using wiping cache COMMAND.

32e2fa1e37429d9f6bac1f272c4946cb1342b502 authored over 9 years ago by lwyeluo <[email protected]>

Added four patron-api names setpolicy, getpolicy, setlabel and getlabel.

b5e25e63a91f464fb716a72b1c7400aa7adaa017 authored over 9 years ago by lwyeluo <[email protected]>

Fixed the port and import class bugs in patron API test script.

98cc1d78b0fcc56b9cd57f1265e9cf52d9215b04 authored over 9 years ago by hsluoyz <[email protected]>

Updated the custom policy example and the related README to support multi-policy.

7a0648fb202dd0fe0269690c5461875958834eff authored over 9 years ago by hsluoyz <[email protected]>

Added AllForbidEnforcer for multi-policy, and improved debug output and file format checking.

d3c29a659c238daa4dde8d4bf05f676b50a604bb authored over 9 years ago by hsluoyz <[email protected]>

Added the "AllPassEnforcer" as an example for multi-policy, it will allow all accesses.

d89f1a5cf360903f31a35039a4150634e8e8d62e authored over 9 years ago by hsluoyz <[email protected]>

Decoupled the default policy (in default.py) from the original enforcement logic (in policy.py).

7590aeb1f4b08094b6cd7aca556b55b60ca29b17 authored over 9 years ago by hsluoyz <[email protected]>

Added metadata file mechanism for multi-policy support in patron, if metadata file is found, policy module will use this file to load the current policy, not finished yet.

f6299cfa17724b58cc3718c00ffc640cb5340d3e authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that "patron verify" command fails without specifying "op".

a2f6142b19995fc608403b356238959b12fd4e89 authored over 9 years ago by hsluoyz <[email protected]>

Improved the config README that described how to update db.

d72fd0ac56e3e8d0197c7111ee27cf1411599118 authored over 9 years ago by hsluoyz <[email protected]>

Modified patron api(VERIFY) by putting OP into req.body for consistency of url.

f57efbc66b9c052f5b2edfba54ccf718ff9169e9 authored over 9 years ago by lwyeluo <[email protected]>

Fixed AVC Class's bug to support for caching more than Record.(Test PASS)

1c3f387ad90b3c39c7b8c61dd58d2b7c01aef4b6 authored over 9 years ago by lwyeluo <[email protected]>

Modified AVC Class to support for caching more than one Record in patron_cache.py(not tested)

ded6f0af23c9005883e4ad0aa09bcadc717fd2ea authored over 9 years ago by lwyeluo <[email protected]>

Added "os-instance-actions" target parsing for AEM.

9ef66e8898137eaf9e3799d7a4ba306a6713bb31 authored over 9 years ago by hsluoyz <[email protected]>

Added "os-tenant-networks" and "os-simple-tenant-usage" parsing support for AEM.

e3fb2006e089bb5c5a142f4ba055527c87e93a67 authored over 9 years ago by hsluoyz <[email protected]>

Supported "os-quota-sets" API parsing for AEM.

6cd3fa328b80d6a74814c9aaf92eace5248f07f8 authored over 9 years ago by hsluoyz <[email protected]>

Added 3 URL parsing support for AEM: os-aggregates, os-networks, flavors.

0ce82894f314acc91780d812b61f09e276e34b2b authored over 9 years ago by hsluoyz <[email protected]>

added KeyError Exception handling.

42719e028e7bacb20cf175caa62eb6c1f1da24f0 authored over 9 years ago by lwyeluo <[email protected]>

Added parsing support for command "nova keypair-show ext-key" in AEM.

f323e03fb760cf43812372b9c9eafc6929fd6dc1 authored over 9 years ago by hsluoyz <[email protected]>

Initially added the URL parser for AEM.

f3b53e98d08c7466018036586127aa3a1d5d19cc authored over 9 years ago by lwyeluo <[email protected]>

Initially added the URL-to-rule_name parsing code for AEM.

43f4c510f06341b2c26f89da2c1f760bfd026a1e authored over 9 years ago by puyangsky <[email protected]>

modified AVC to support multiprocessing

93d420454e08abc2ad413dd71174e102800eea6c authored over 9 years ago by lwyeluo <[email protected]>

modified the author name

050458a7f5fcf43611dfe309130785c6b84faf0c authored over 9 years ago by lwyeluo <[email protected]>

Finished the collection of web path vector for AEM.

e326675b4d61175c570e16e35722a3f120dbe07a authored over 9 years ago by hsluoyz <[email protected]>

Added security_label attribute for instance and network objects (including db and python object).

67ae754b93a6e91b9b0df7ec912ac53a1857a459 authored over 9 years ago by hsluoyz <[email protected]>

Disabled the access vector cache, as it is still buggy on multi-processing support.

3200d669b6a2d8227780068754d19d98c06c44d5 authored over 9 years ago by hsluoyz <[email protected]>

Initially added the request vector cache for AEM.

84f26ab03b0c69ad03fb6b1b16b75c0c37924f9d authored over 9 years ago by hsluoyz <[email protected]>

Updated the README for new nova filter configuration.

44cf50663e8b7a896bd3c6305ee5280ba6c62cf0 authored over 9 years ago by hsluoyz <[email protected]>

Initially added the multi-policy feature, Patron will first use /etc/patron/custom_policy/{PROJECT_ID}/policy.json first, if not found, then use the original one.

2560b268beb16a790f764605341ea265d1c96578 authored over 9 years ago by hsluoyz <[email protected]>

Registered the "patron_verify" filter for nova, this filter is used to mediate the access to nova.

0babeaf80d9f15092f909f536e06474c395ce07a authored over 9 years ago by hsluoyz <[email protected]>

Uploaded nova's original "api-paste.ini" file.

3e8daf5cb4338fe2baef77b5dc96966d621cdd22 authored over 9 years ago by hsluoyz <[email protected]>

Added op's NULL check for Patron.

5621f4df780c827b5a2cbfe524987a69877108e8 authored over 9 years ago by hsluoyz <[email protected]>

Added a new filter named PatronVerify

36e808330aa8f50e2d425e7ed79f65a8582e5443 authored over 9 years ago by lwyeluo <[email protected]>

Renamed "rule" to "op" to comply with FLASK.

cc09aaf6be346dd2a6a482ab3d402c2206154785 authored over 9 years ago by hsluoyz <[email protected]>

Now patron will use the target sent from nova filter to check against the policy, if no target is found, then use the context as the target.

b78a51cc9de399c7d7ac42d19b500ee4c0e7a90d authored over 9 years ago by hsluoyz <[email protected]>

Added the mapping function from request to security rule name and target object for nova filter.

a88e2ac867472539e533e0c200e1501b4d80a7cd authored over 9 years ago by hsluoyz <[email protected]>

Nova filter now can send object security context (named "target") to Patron.

b9932505d6c171ba378e1b5331a8ca9f9b8b3ec2 authored over 9 years ago by hsluoyz <[email protected]>

Added command run time statistics for nova commands (novaclient).

db1bdad137d61ebf1d2514c4646de58751f908da authored over 9 years ago by hsluoyz <[email protected]>

Modified mylog.txt position to "/var/log/patron/", improved the variable log function.

c2ca50cdc6a6fbb1a3f2bf7912ab965377184790 authored over 9 years ago by hsluoyz <[email protected]>

Retrieved req_path_info and req_action from nova filter, these two variables can be used to get the rule name.

bfa50355b541078ee777fe9f6445b719c86416ea authored over 9 years ago by hsluoyz <[email protected]>

Improved the config README for patron.

f130c6c597aa8d2d5a03148b806917f3107d4d8c authored over 9 years ago by hsluoyz <[email protected]>

Comments said that policy.enforce() doesn't necessarily return True, so we need to add this check.

912337dc9e80f38d78d3cbddf37aae24e8c0a900 authored over 9 years ago by hsluoyz <[email protected]>

Added parameter log for patron controller, displayed in /var/lib/patron/mylog.txt.

a84e211efe83859a5b77816c9461a33de9831235 authored over 9 years ago by hsluoyz <[email protected]>

Fixed the bug that "auth_url" variable is used without definition.

75b24f63a31652d9121a56b0370d9fd6d9a80dfc authored over 9 years ago by hsluoyz <[email protected]>