10000 feat: Add RBAC to /workspace endpoints by Emyrk · Pull Request #1566 · coder/coder · GitHub
[go: up one dir, main page]
Skip to content

feat: Add RBAC to /workspace endpoints #1566

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 10 commits into from
May 18, 2022
Merged

feat: Add RBAC to /workspace endpoints #1566

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
a2fdb42
feat: Add RBAC to /workspace endpoints
Emyrk May 18, 2022
277b0eb
Merge remote-tracking branch 'origin/main' into stevenmasley/rbac_org…
Emyrk May 18, 2022
7d10d2f
Fix unit test
Emyrk May 18, 2022
d8f3f0e
Go fmt
Emyrk May 18, 2022
22a55ce
Creating an org requires admin role
Emyrk May 18, 2022
ccd7b40
Merge remote-tracking branch 'origin/main' into stevenmasley/rbac_org…
Emyrk May 18, 2022
91c19c0
Fix test
Emyrk May 18, 2022
b2ace2c
add more checks to unit test
Emyrk May 18, 2022
18eb91b
Add require
Emyrk May 18, 2022
b37aead
Wait for workspace job to be completed
Emyrk May 18, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Fix unit test
  • Loading branch information
@Emyrk
Emyrk committed May 18, 2022
commit 7d10d2f70647446508b492dc79a9994c6ff06a73
14 changes: 7 additions & 7 deletions coderd/coderd_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -90,13 +90,7 @@ func TestAuthorizeAllEndpoints(t *testing.T) {
"GET:/api/v2/workspaceagents/{workspaceagent}/turn": {NoAuthorize: true},

// TODO: @emyrk these need to be fixed by adding authorize calls
"GET:/api/v2/workspaceresources/{workspaceresource}": {NoAuthorize: true},
"GET:/api/v2/workspacebuilds/{workspacebuild}": {NoAuthorize: true},
"GET:/api/v2/workspacebuilds/{workspacebuild}/logs": {NoAuthorize: true},
"GET:/api/v2/workspacebuilds/{workspacebuild}/resources": {NoAuthorize: true},
"GET:/api/v2/workspacebuilds/{workspacebuild}/state": {NoAuthorize: true},
"PATCH:/api/v2/workspacebuilds/{workspacebuild}/cancel": {NoAuthorize: true},
"GET:/api/v2/workspaces/{workspace}/builds/{workspacebuildname}": {NoAuthorize: true},
"GET:/api/v2/workspaceresources/{workspaceresource}": {NoAuthorize: true},

"GET:/api/v2/users/oauth2/github/callback": {NoAuthorize: true},

Expand Down Expand Up @@ -139,6 +133,7 @@ func TestAuthorizeAllEndpoints(t *testing.T) {
"GET:/api/v2/organizations/{organization}/workspaces/{user}": {StatusCode: http.StatusOK, AssertObject: rbac.ResourceWorkspace},
"GET:/api/v2/organizations/{organization}/workspaces/{user}/{workspace}": {
AssertObject: rbac.ResourceWorkspace.InOrg(organization.ID).WithID(workspace.ID.String()).WithOwner(workspace.OwnerID.String()),
},
"GET:/api/v2/workspaces/{workspace}/builds/{workspacebuildname}": {
AssertAction: rbac.ActionRead,
AssertObject: workspaceRBACObj,
Expand Down Expand Up @@ -184,6 +179,11 @@ func TestAuthorizeAllEndpoints(t *testing.T) {
AssertAction: rbac.ActionRead,
AssertObject: workspaceRBACObj,
},
"GET:/api/v2/workspaces/": {
StatusCode: http.StatusOK,
AssertAction: rbac.ActionRead,
AssertObject: workspaceRBACObj,
},

// These endpoints need payloads to get to the auth part. Payloads will be required
"PUT:/api/v2/users/{user}/roles": {StatusCode: http.StatusBadRequest, NoAuthorize: true},
Expand Down
0