Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

  •  
     
    story #13669 permission delegation for a read-only site admin (REST)
Actions
Summary
Empty
permission delegation for a read-only site admin (REST)
Empty

Overview

In order to do proper indexing with an external engine (like datafari) the API should be crawled by a user with access to all data. However there is no need for this user to modify data.

So we introduce a new top delegated permission "REST Read-only site administrator".

Users with this permission will have the right to read all resources of the platform (basically all GET/OPTIONS) but will have their regular rights for write/update routes (PATCH/POST/PUT/DELETE/...).

This permission only apply to REST resources, the user with "REST Read-only site administrator" permission won't have access to site admin web ui (even in read).

Empty
Empty
Status
Empty
Done
Development
  • [ ] Does it involves User Interface? 
  • [ ] Are there any mockups?
  • [ ] Are permissions checked?
  • [ ] Does it need Javascript development?
  • [ ] Does it need a forge upgrade bucket?
  • [ ] Does it need to execute things in system events?
  • [ ] Does it impact project creation (templates)?
  • [ ] Is it exploratory?
Empty
Details
#13669
Manuel Vacelet (vaceletm)
2019-09-17 16:15
2019-07-24 17:30
14846

References
Artifact links
Empty
Referencing story #13669

Artifact Tracker v5

rel #13668 11.6
epic #13670 Datafari Integration

Git commit

tuleap/tuleap/stable

Add REST read only tests for CustomMetadataTest 8503b484a8
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 10:06
add missing tests get /frs_packages/{id}/frs_release fbb0b61069
User avatar Marie Ange Garnier (marieange) , 2019-09-16 18:14
Docman REST tests should not use directly user ids 961a28b055
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-27 10:36
User with REST read only special permission can access all the content through the API 129af08c72
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-27 13:43
Initialize REST read only user with permission in REST testsuite 0d7bad80bb
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-27 14:43
Add REST read only tests for artfact_files and artifact_temporaray_files endpoints 96c51f2cab
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-28 08:59
Add REST read only tests for backlog_items/ d25607e0ac
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-28 11:18
Add REST read only tests for frs_files/ 3ceb6d5148
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-29 10:31
Add REST read only tests for artifacts/ 1d9527130e
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-29 11:25
Add REST read only tests for frs_packages/ 914075227d
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-29 11:30
Add REST read only tests for docman_embedded_files/ bfbeb9f3f6
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-29 15:53
Fix broken REST docman test 200ff5e4c2
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-29 17:06
Add REST read only tests for docman_files/ 6f13686f34
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-30 11:16
Add REST read only tests for frs_release/ f0f1a0dab4
User avatar Martin GOYOT (goyotm) , 2019-08-30 15:18
Add REST read only tests for gerrit/ ed96b47e71
User avatar Martin GOYOT (goyotm) , 2019-08-30 15:57
Add REST read only tests for docman_folders/ 374b17efee
User avatar Yannis ROSSETTO (rossettoy) , 2019-08-30 17:44
Add REST read only tests for kanban/ b9dc7c89ea
User avatar Martin GOYOT (goyotm) , 2019-09-02 17:13
Fix missing OPTION for kanban rest route 00939fe4f3
User avatar Martin GOYOT (goyotm) , 2019-09-02 18:11
Correct REST test for OPTIONS /kanban for admin users 0cc9442a67
User avatar Marie Ange Garnier (marieange) , 2019-09-03 10:21
Add REST read only tests for git/ 4588d9f19c
User avatar Martin GOYOT (goyotm) , 2019-09-03 17:48
Add REST read only tests for docman_items/ 80572ba721
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-05 11:50
Add REST read only tests for DocmanProjectService 56f91eee81
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-05 15:08
Add REST read only tests for docman_links/ f406108ee6
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-05 14:57
Add REST read only tests for docman_wikis/ e9840beeb6
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-05 17:31
Add REST read only tests for jwt/ 8d7fa74f2d
User avatar Martin GOYOT (goyotm) , 2019-09-05 18:18
Add REST read only tests for kanban_columns/ 91beb2f6cf
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 11:08
Add REST read only tests for kanban_items/ 4290970fb6
User avatar Martin GOYOT (goyotm) , 2019-09-06 11:19
Add REST read only tests for phpwiki/ 1171b099f9
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 11:25
Add REST read only tests for plannings/ 56bf85bddf
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 11:43
Add REST read only tests for svn/ 0f9e0a84de
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 14:41
Add REST read only tests for system_event/ 114c0a1d38
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 14:49
Add REST read only tests admin for docman empty documents. 22250bb634
User avatar Clarck Robinson (robinsoc) , 2019-09-09 13:56
Add REST read only tests for milestones/ af4d9af9df
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-09 14:54
Add REST read only tests for projects/ (1st part) 80c60fd0d8
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-10 08:44
Add REST read only tests for tracker_reports b7a7b10eb4
User avatar Clarck Robinson (robinsoc) , 2019-09-10 09:13
Add REST read only tests for pull_requests/ 41ea4bcfa7
User avatar Martin GOYOT (goyotm) , 2019-09-10 10:12
Add REST read only tests for trackers/ 1031718024
User avatar Martin GOYOT (goyotm) , 2019-09-10 12:01
Add REST read only tests for tracker_workflow_transition/ f2caa1cd45
User avatar Clarck Robinson (robinsoc) , 2019-09-10 12:06
Add REST read only tests for projects/ (big file) f8a63cff10
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-10 14:44
Add REST read only tests for user_memberships/ a7908506e3
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-10 15:27
Add REST read only tests for users/ 41594de959
User avatar Martin GOYOT (goyotm) , 2019-09-10 17:50
Replace the RestUserManager to UserManager in the Timetracking plugin 2a3fae31ef
User avatar Clarck Robinson (robinsoc) , 2019-09-11 09:14
Add REST read only tests for user_groups/ c5e4c75e57
User avatar Clarck Robinson (robinsoc) , 2019-09-11 10:09
Replace the RestUserManager with UserManager in ServiceResource 5ff6cd4946
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-11 10:17
Replace the RestUserManager to UserManager in the TransitionResource.php from Tracker plugin 4ae7656ba0
User avatar Clarck Robinson (robinsoc) , 2019-09-11 11:13
Replace RestUserManager with UserManager in ChartMessageFetcher 2f7316e744
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-11 11:29
Replace the RestUserManager with UserManager in UserResources 1374d0d8e6
User avatar Clarck Robinson (robinsoc) , 2019-09-11 11:28
Add UI to select Rest read only administrator in permission delegation b5e7d4ad1f
User avatar Martin GOYOT (goyotm) , 2019-09-11 11:29
Replace the RestUserManager with UserManager in Create Test Env Plugin e440b7ce67
User avatar Clarck Robinson (robinsoc) , 2019-09-11 14:06
Replace the RestUserManager with UserManager in Tracker 4a9ffc08ec
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-11 17:24
UI add warning that user should not use web application 72397e9ab1
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-12 13:35
Cache tracker structures to increase the speed of REST testsuite c495f12997
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-12 15:02
Put in a dedicated namespace the REST user read only admin rest tests from Artifacts 43b2a122e4
User avatar Clarck Robinson (robinsoc) , 2019-09-13 11:24
Add an error message when logging in with Read only administrator user 7b0465e2c5
User avatar Martin GOYOT (goyotm) , 2019-09-16 15:18
Clean unused public const of DataBuilder 41e06ca499
User avatar Marie Ange Garnier (marieange) , 2019-09-17 09:49
add missing test POST id/git 6b7afa66ca
User avatar Marie Ange Garnier (marieange) , 2019-09-17 09:59
Add test for bot user for GET projects/id/frs_service 5fa893fd8c
User avatar Marie Ange Garnier (marieange) , 2019-09-17 14:50
Add tests for cross_tracker_report f7cdc6b079
User avatar Marie Ange Garnier (marieange) , 2019-09-17 14:14
add missing tests for DELETE kanban_column/id 9a2dc280a5
User avatar Marie Ange Garnier (marieange) , 2019-09-17 14:07
Add missing test PUT cards/id for BOT user 4e14830570
User avatar Marie Ange Garnier (marieange) , 2019-09-17 14:03
Cache TTM first campaing to increase the speed of REST testsuite 7321719c34
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-13 09:37
Add REST read only tests for ProjectTest 4d6681435c
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-09 10:50
Add REST read only tests for testmanagement_executions/ e4022aeb41
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 16:58
Add REST read only tests for testmanagement_definitions/ 32177f6f0d
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 16:25
Add REST read only tests for testmanagement_campaigns/ b35b71e338
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-06 15:40
Add tests for baseline 9fd31571df
User avatar Martin GOYOT (goyotm) , 2019-09-17 17:19
Replace the RestUserManager with UserManager in REST context c5eccbdf00
User avatar Yannis ROSSETTO (rossettoy) , 2019-09-11 17:31
Display settings

Follow-ups

User avatar
Manuel Vacelet (vaceletm)2019-08-09 16:08
  • Acceptance criteria
    Something went wrong, the follow up content couldn't be loaded
    Only formatting have been changed, you should switch to markup to see the changes