 Girish Ramakrishnan
|
91a1bc7a01
|
move verifyOperator to users routes
|
2018-09-06 00:10:09 -07:00 |
|
|
Girish Ramakrishnan
|
43055da614
|
Add route to let admin set user password
|
2018-08-31 14:35:01 -07:00 |
|
|
Johannes Zellner
|
f05df7cfef
|
Allow set admin flag on user creation
|
2018-08-21 17:12:46 +02:00 |
|
|
Girish Ramakrishnan
|
6a1a697820
|
Split the invite route into two
|
2018-08-17 16:27:29 -07:00 |
|
|
Girish Ramakrishnan
|
554006683e
|
Only unset of admin flag is disallowed
|
2018-07-26 23:43:44 -07:00 |
|
|
Girish Ramakrishnan
|
78a2176d1d
|
Make admin simply a boolean instead of group
This simplifies a lot of logic. Keeping an admin group has no benefit
|
2018-07-26 22:29:57 -07:00 |
|
|
Girish Ramakrishnan
|
6810c61e58
|
Add audit event for ownership transfer
|
2018-07-05 13:51:22 -07:00 |
|
|
Girish Ramakrishnan
|
9978dff627
|
Add API to set and transfer ownership
|
2018-06-28 16:48:04 -07:00 |
|
|
Girish Ramakrishnan
|
ff5bd42bef
|
remove mostly dead comment
|
2018-06-28 14:19:56 -07:00 |
|
|
Girish Ramakrishnan
|
f932f8b3d3
|
Add user management scope
This splits the user and groups API into those who have just 'read' access
and those who have 'manage' access.
|
2018-06-25 16:10:00 -07:00 |
|
|
Girish Ramakrishnan
|
8a84872704
|
Wrong password logs out the user
|
2018-06-18 18:52:35 -07:00 |
|
|
Girish Ramakrishnan
|
7f3114e67d
|
Rename to get/setMembership (to indicate IDs and not group objects
|
2018-06-18 13:57:17 -07:00 |
|
|
Girish Ramakrishnan
|
db8b6838bb
|
Move skip password verification logic to accesscontrol.js
|
2018-06-17 15:20:27 -07:00 |
|
|
Girish Ramakrishnan
|
e8d9597345
|
Fix various error codes
401 - bad password/wrong password
403 - authenticated but not authorized
409 - conflict
|
2018-06-15 23:15:30 -07:00 |
|
|
Girish Ramakrishnan
|
89b41b11a4
|
Remove bogus accesscontrol logic
|
2018-06-15 16:26:14 -07:00 |
|
|
Girish Ramakrishnan
|
4369b3046e
|
Make options non-optional
|
2018-06-11 15:14:59 -07:00 |
|
|
Girish Ramakrishnan
|
d752ef5fad
|
Move password generation logic to model code
|
2018-06-11 13:06:08 -07:00 |
|
|
Girish Ramakrishnan
|
23bc0e8db7
|
Remove SDK Role
Just compare with the token's clientId instead
|
2018-04-30 23:03:30 -07:00 |
|
|
Girish Ramakrishnan
|
bc4f9cf596
|
Remove redundant requireAdmin
We already hand out scopes based on the user's access control
|
2018-04-30 21:38:48 -07:00 |
|
|
Girish Ramakrishnan
|
b5f8ca6c16
|
Fix nasssty typo
|
2018-04-29 17:50:12 -07:00 |
|
|
Girish Ramakrishnan
|
3b7bcc1f61
|
refactor scopes into accesscontrol.js
this will be our authorization layer for oauth and non-oauth tokens.
|
2018-04-29 17:50:07 -07:00 |
|
|
Girish Ramakrishnan
|
d8acf92929
|
UserError -> UsersError
|
2018-04-29 11:22:15 -07:00 |
|
|
Girish Ramakrishnan
|
4fd58fb46b
|
Rename user.js to users.js
|
2018-04-29 11:19:04 -07:00 |
|