1
0
Fork 0
forked from sr2/cloud-api
Commit graph

214 commits

Author SHA1 Message Date
2c5edd1b0f feat: default org perm grant grants 2026-06-17 09:32:12 +01:00
d6c14655c0 feat: batch add perm to org 2026-06-16 16:48:32 +01:00
4b384db98a feat: service permissions endpoint
Endpoint to allow services to register their own permissions into the hub.
2026-06-16 16:24:09 +01:00
327f857190 feat: service-permission orm relationship 2026-06-16 16:10:08 +01:00
154870acb1 feat: service key dependency generic
Dependency to verify service API key accepts the service_name from a RN generic, allowing for endpoints without a full RN to use it.
2026-06-16 16:09:17 +01:00
f96cb2112c minor: rename search endpoint function 2026-06-16 16:05:17 +01:00
662b9c8e26 feat: permission permissions
Orgs can only grant permissions to groups that they themselves have been granted access to.

Super admin bypasses not added, flagged as todos.
2026-06-16 13:51:31 +01:00
0a867c9c90 minor: relationship key definitions to strings
Using the objects directly was causing type checking issues. Strings are equivalent so no functional change.
2026-06-16 11:19:22 +01:00
3e4f68dd9b fix: unique violations
Directly using Psycopg error instead of the error code.

Also, raise all other IntegrityErrors instead of silently dropping them.
2026-06-15 14:38:14 +01:00
3433ba39ee feat: default iam group on org join
Users joining an org are given the `Default User` IAM permission group automatically.
2026-06-15 11:35:01 +01:00
09d2fbafdc feat: default iam groups on org create
Root user is given the `Default Users` and `Root User` permission groups on org creation.
2026-06-15 11:26:22 +01:00
dad23733e8 feat: group name unique per org
Instead of group names being wholly unique (enforced by the db), group names are unique within the org (enforced by endpoint logic).
2026-06-15 11:10:02 +01:00
3f7abc5986 tests: preapproval
Issue: #24
2026-06-15 09:34:43 +01:00
2b4c875da3 tests: group invitation 2026-06-15 09:31:36 +01:00
da6bd22199 minor: typo 2026-06-12 16:44:45 +01:00
43ed768f66 feat: minimum lengths for names 2026-06-12 15:58:20 +01:00
092e12a892 feat: org status check moved
Accessing endpoints as super admin no longer requires the org to be approved.
2026-06-12 14:50:32 +01:00
a655eaf543 tests: delete_group_perm perm not in group
Issue: #24
2026-06-12 13:17:07 +01:00
fe2171df44 tests: delete group perm status checks
Issue: #24
2026-06-12 13:08:58 +01:00
c0b9763669 tests: caor status checks match new model
Issue: #24
2026-06-12 13:01:04 +01:00
fc9d7f8536 tests: body param generator
Issue: #24
2026-06-12 12:54:48 +01:00
778f1dbece tests: remove db modifications from individual tests
All db seeding now down in conftest
2026-06-12 11:29:42 +01:00
8b89595531 feat: group invitation response model 2026-06-12 10:02:35 +01:00
1a29da73c2 feat: use of service model dependency 2026-06-12 09:37:55 +01:00
f06b19340c feat: remove group permission check if exists 2026-06-12 09:30:34 +01:00
c94c26f2a6 feat: blocked orgs cannot access any endpoints 2026-06-11 16:39:32 +01:00
37a3972d04 feat: questionnaire only modifiable before submission 2026-06-11 16:35:53 +01:00
2b923becf0 feat: perm search ignores empty strings 2026-06-11 16:23:02 +01:00
1a6a6ad97d fix: remove trailing slash and plurals in paths 2026-06-11 16:14:22 +01:00
c74e895bf1 feat: return org summary when creating group 2026-06-11 16:07:31 +01:00
5d122a7690 feat: fully defined response code descriptions
Only done on three endpoints. This is a lot of repeated text.
2026-06-11 16:02:51 +01:00
c2e035dede feat: more accurate status codes
403 Forbidden replacing many 401 Unauthorized usages.
2026-06-11 14:58:05 +01:00
b3ae655009 feat: healthcheck endpoint structure 2026-06-11 14:27:08 +01:00
bcdef91dd0 feat: user invite response models 2026-06-11 14:14:31 +01:00
8925280f96 feat: questions union
Allows responses to include questionnaire questions of multiple versions
2026-06-11 13:38:14 +01:00
38c26cca7b docs: iam module meta doc 2026-06-11 13:07:48 +01:00
0a7f9092c7 feat: questionnaire shape update 2026-06-11 12:24:36 +01:00
c268097306 feat: helper for generating module docstrings 2026-06-11 09:57:34 +01:00
dd0478d5e7 docs: iam router
Issue: #13
2026-06-11 09:36:51 +01:00
61e186a727 docs: iam router (incomplete)
Issue: #13
2026-06-10 16:49:37 +01:00
ec41d1ed05 feat: caor docs and response model 2026-06-10 16:16:56 +01:00
0b521414b3 feat: add group user by id restriction
Adding by ID can only be done for existing org members
2026-06-10 14:48:22 +01:00
3dbd72a109 feat: 403 exception 2026-06-10 14:47:33 +01:00
ec572aa4c1 feat: sua expiry handling 2026-06-10 14:14:22 +01:00
294baadcb7 feat: more ids returned on endpoints
Issue: #23
2026-06-10 13:48:59 +01:00
5a433dfe41 tests: dynamic test structure
Issue: #23
2026-06-10 12:29:15 +01:00
bdba903db1 feat: deleted owned org endpoint 2026-06-10 10:15:27 +01:00
3b82025abb feat: get org response mirrors get user orgs structure 2026-06-10 09:49:05 +01:00
939abaefe9 feat: improved caor request model
Issue: #23
2026-06-10 09:32:02 +01:00
768a3881ef feat: sua added to group invitations
Issue: #23
2026-06-09 16:52:22 +01:00