David Christofas
826a67b98d
change hashing algorithm from SHA-512 to bcrypt
...
Even though SHA-512 is currently considered a secure algorithm it is not the best choice for password hashing. As this change introduces a breaking change it is beast to introduce it as early as possible to prevent us from having to implement a migration strategy
Signed-off-by: David Christofas <dchristofas@owncloud.com >
2020-09-16 14:10:01 +02:00
Benedikt Kulmann
0272dc269e
Reject new account if id, mail or username already exists
2020-09-16 09:59:53 +02:00
Benedikt Kulmann
456217528b
Bring back building the index on service start
2020-09-11 17:15:36 +02:00
Benedikt Kulmann
51969bfca3
Fix import order and remove debug log
2020-09-11 16:24:56 +02:00
Benedikt Kulmann
425ae7e74a
Fix tests after refactoring
2020-09-11 14:30:17 +02:00
Benedikt Kulmann
600b428ee4
Refactor service handler init code into functions
2020-09-11 14:06:10 +02:00
Benedikt Kulmann
c661312f5d
Move service handler init to the server command
...
We kept two instances of the service handler in parallel
2020-09-11 12:47:43 +02:00
Benedikt Kulmann
177d41211b
Move role assignment to the end of account creation
2020-09-11 10:26:30 +02:00
Benedikt Kulmann
eedcdf5d8e
Provide role service in service handler for grpc server
2020-09-08 15:39:16 +02:00
Benedikt Kulmann
804e9914f1
Add mock guest role
2020-09-04 11:59:34 +02:00
Benedikt Kulmann
7c315fe001
Sort imports
2020-09-04 11:57:57 +02:00
Benedikt Kulmann
232e84e131
Rename test file to reflect that it's only about permission checks
2020-09-04 11:52:50 +02:00
Benedikt Kulmann
b1a4b48167
Add test for permission checks on CreateAccount
2020-09-04 11:51:52 +02:00
Benedikt Kulmann
c4edd4828d
Add test for permission checks on DeleteAccount
2020-09-04 11:50:08 +02:00
Benedikt Kulmann
dc2484d584
Add tests for UpdateAccount
2020-09-04 11:47:29 +02:00
Benedikt Kulmann
a0cbbaaf71
Add test for GetAccount permission checks
2020-09-04 11:43:28 +02:00
Benedikt Kulmann
d6db5c9f64
Test setup for accounts handler and ListAccounts permission checks
2020-09-04 11:36:27 +02:00
Benedikt Kulmann
95bc5111e5
Switch over from roleCache+middleware to roleManager
2020-09-02 15:46:30 +02:00
Benedikt Kulmann
f689eff081
Add more doc comments
2020-08-31 08:53:20 +02:00
Benedikt Kulmann
512fe49c34
Fix function comment
2020-08-31 08:53:16 +02:00
Benedikt Kulmann
957e1987ab
Update ocis-pkg/v2@master and ocis-settings@master
2020-08-31 08:52:05 +02:00
Benedikt Kulmann
65bf34b12c
Setup roles cache and use it for permission checks
2020-08-31 08:50:30 +02:00
Benedikt Kulmann
2fb28d0554
Register general purpose permission for account management
2020-08-31 08:41:40 +02:00
Benedikt Kulmann
ec1d6fbe70
Make use of the new READWRITE operation
2020-08-31 08:41:40 +02:00
Benedikt Kulmann
97e4450102
Add role service to options
2020-08-28 16:26:15 +02:00
Benedikt Kulmann
a8c640add6
Add default user moss and assign default roles to builtin users
2020-08-28 15:52:49 +02:00
Ilja Neumann
73c8b11f3d
Use dependency-injected grpc client
2020-08-26 20:19:14 +02:00
Ilja Neumann
f552072608
Assign user role to newly created accounts.
...
https://github.com/owncloud/product/issues/173
2020-08-26 20:19:14 +02:00
Benedikt Kulmann
e695ccc440
Make linter happy
2020-08-19 17:33:18 +02:00
Benedikt Kulmann
2ae2cf40c9
Add permissions for language to default roles of settings service
2020-08-19 17:33:17 +02:00
Benedikt Kulmann
f5f356f001
Rename variable to comply with golang var naming rules
2020-08-19 11:54:57 +02:00
Benedikt Kulmann
45b486c68e
Update to new data model of ocis-settings
2020-08-19 11:53:56 +02:00
A.Unger
7c29818921
undo group changes
2020-08-07 14:27:38 +02:00
A.Unger
a4e8a8f09e
typo
2020-08-07 14:15:08 +02:00
A.Unger
510007d402
update groups
2020-08-07 14:13:16 +02:00
A.Unger
9a9745837f
atomic requests
2020-08-07 14:10:18 +02:00
Jörn Friedrich Dreyer
20a577dc15
fix index mapping
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2020-07-31 11:25:57 +02:00
A.Unger
c432f296eb
set lock on read
2020-07-30 10:10:52 +02:00
A.Unger
4074565a6b
use global mutex
2020-07-30 10:06:29 +02:00
Jörn Friedrich Dreyer
52c2781548
Add write mutexes
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2020-07-30 08:49:03 +02:00
A.Unger
b6ab351c0b
make go vet happy
2020-07-28 16:58:17 +02:00
A.Unger
c717105a49
override out with acc
2020-07-28 16:28:17 +02:00
Jörn Friedrich Dreyer
694fe677aa
Add cli-subbcomands to mange users
...
ocis-accounts [list|delete|update|add|inspect]
Implements UpdateMask for the update request. Changed server-handler accordingly.
The commands use service-discovery to discover the backend.
2020-07-27 18:43:59 +02:00
Jörn Friedrich Dreyer
65e3df2b1e
tighten the screws
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2020-07-23 12:52:41 +02:00
Jörn Friedrich Dreyer
bf3581c914
fix password related segfaults
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2020-07-23 11:17:58 +02:00
Dipak Acharya
43effc0cba
Fix the account and group id mismatch in delete group method
2020-07-16 10:32:36 +05:45
Benedikt Kulmann
00ea1f186a
Refactor indexing of new entities into own function
...
This also fixes that on Create and Update calls the index was not
updated properly.
2020-07-15 08:25:27 +02:00
Jörn Friedrich Dreyer
b4f1a908a9
index with type
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2020-07-10 15:51:13 +02:00
Jörn Friedrich Dreyer
9d63ca148a
use on_premises_sam_account_name instead of preferred_name
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2020-07-10 15:51:13 +02:00
Jörn Friedrich Dreyer
31f9cca78b
satisfy staticcheck
...
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de >
2020-07-10 15:51:13 +02:00
