1
0
Fork 0
forked from sr2/cloud-api
Commit graph

216 commits

Author SHA1 Message Date
7804816a1a fix: rn takes org id instead of name 2026-06-17 13:12:59 +01:00
d5854cc2c4 feat: user and org defaults
Root and User defaults made more generic and merged.

Root user group assignment merged with org default perm assignment.

Root user granted all default org permissions at org creation.
2026-06-17 10:49:58 +01:00
2c5edd1b0f feat: default org perm grant grants 2026-06-17 09:32:12 +01:00
d6c14655c0 feat: batch add perm to org 2026-06-16 16:48:32 +01:00
4b384db98a feat: service permissions endpoint
Endpoint to allow services to register their own permissions into the hub.
2026-06-16 16:24:09 +01:00
327f857190 feat: service-permission orm relationship 2026-06-16 16:10:08 +01:00
154870acb1 feat: service key dependency generic
Dependency to verify service API key accepts the service_name from a RN generic, allowing for endpoints without a full RN to use it.
2026-06-16 16:09:17 +01:00
f96cb2112c minor: rename search endpoint function 2026-06-16 16:05:17 +01:00
662b9c8e26 feat: permission permissions
Orgs can only grant permissions to groups that they themselves have been granted access to.

Super admin bypasses not added, flagged as todos.
2026-06-16 13:51:31 +01:00
0a867c9c90 minor: relationship key definitions to strings
Using the objects directly was causing type checking issues. Strings are equivalent so no functional change.
2026-06-16 11:19:22 +01:00
3e4f68dd9b fix: unique violations
Directly using Psycopg error instead of the error code.

Also, raise all other IntegrityErrors instead of silently dropping them.
2026-06-15 14:38:14 +01:00
3433ba39ee feat: default iam group on org join
Users joining an org are given the `Default User` IAM permission group automatically.
2026-06-15 11:35:01 +01:00
09d2fbafdc feat: default iam groups on org create
Root user is given the `Default Users` and `Root User` permission groups on org creation.
2026-06-15 11:26:22 +01:00
dad23733e8 feat: group name unique per org
Instead of group names being wholly unique (enforced by the db), group names are unique within the org (enforced by endpoint logic).
2026-06-15 11:10:02 +01:00
3f7abc5986 tests: preapproval
Issue: #24
2026-06-15 09:34:43 +01:00
2b4c875da3 tests: group invitation 2026-06-15 09:31:36 +01:00
da6bd22199 minor: typo 2026-06-12 16:44:45 +01:00
43ed768f66 feat: minimum lengths for names 2026-06-12 15:58:20 +01:00
092e12a892 feat: org status check moved
Accessing endpoints as super admin no longer requires the org to be approved.
2026-06-12 14:50:32 +01:00
a655eaf543 tests: delete_group_perm perm not in group
Issue: #24
2026-06-12 13:17:07 +01:00
fe2171df44 tests: delete group perm status checks
Issue: #24
2026-06-12 13:08:58 +01:00
c0b9763669 tests: caor status checks match new model
Issue: #24
2026-06-12 13:01:04 +01:00
fc9d7f8536 tests: body param generator
Issue: #24
2026-06-12 12:54:48 +01:00
778f1dbece tests: remove db modifications from individual tests
All db seeding now down in conftest
2026-06-12 11:29:42 +01:00
8b89595531 feat: group invitation response model 2026-06-12 10:02:35 +01:00
1a29da73c2 feat: use of service model dependency 2026-06-12 09:37:55 +01:00
f06b19340c feat: remove group permission check if exists 2026-06-12 09:30:34 +01:00
c94c26f2a6 feat: blocked orgs cannot access any endpoints 2026-06-11 16:39:32 +01:00
37a3972d04 feat: questionnaire only modifiable before submission 2026-06-11 16:35:53 +01:00
2b923becf0 feat: perm search ignores empty strings 2026-06-11 16:23:02 +01:00
1a6a6ad97d fix: remove trailing slash and plurals in paths 2026-06-11 16:14:22 +01:00
c74e895bf1 feat: return org summary when creating group 2026-06-11 16:07:31 +01:00
5d122a7690 feat: fully defined response code descriptions
Only done on three endpoints. This is a lot of repeated text.
2026-06-11 16:02:51 +01:00
c2e035dede feat: more accurate status codes
403 Forbidden replacing many 401 Unauthorized usages.
2026-06-11 14:58:05 +01:00
b3ae655009 feat: healthcheck endpoint structure 2026-06-11 14:27:08 +01:00
bcdef91dd0 feat: user invite response models 2026-06-11 14:14:31 +01:00
8925280f96 feat: questions union
Allows responses to include questionnaire questions of multiple versions
2026-06-11 13:38:14 +01:00
38c26cca7b docs: iam module meta doc 2026-06-11 13:07:48 +01:00
0a7f9092c7 feat: questionnaire shape update 2026-06-11 12:24:36 +01:00
c268097306 feat: helper for generating module docstrings 2026-06-11 09:57:34 +01:00
dd0478d5e7 docs: iam router
Issue: #13
2026-06-11 09:36:51 +01:00
61e186a727 docs: iam router (incomplete)
Issue: #13
2026-06-10 16:49:37 +01:00
ec41d1ed05 feat: caor docs and response model 2026-06-10 16:16:56 +01:00
0b521414b3 feat: add group user by id restriction
Adding by ID can only be done for existing org members
2026-06-10 14:48:22 +01:00
3dbd72a109 feat: 403 exception 2026-06-10 14:47:33 +01:00
ec572aa4c1 feat: sua expiry handling 2026-06-10 14:14:22 +01:00
294baadcb7 feat: more ids returned on endpoints
Issue: #23
2026-06-10 13:48:59 +01:00
5a433dfe41 tests: dynamic test structure
Issue: #23
2026-06-10 12:29:15 +01:00
bdba903db1 feat: deleted owned org endpoint 2026-06-10 10:15:27 +01:00
3b82025abb feat: get org response mirrors get user orgs structure 2026-06-10 09:49:05 +01:00