GitHub PushEvent at 2014-01-06 17:57:28
Repository: candlepin
Actor: thomasmckay
Payload: {"shas":[["f598074bc732cb262c8028f9524915171ff0c42e","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Add a \"my consumers\" permission.\n\nOnly allows the user access to view/edit the consumers they registered.","Devan Goodwin",true],["5b09ca8c22436a69a5c471ee18f09d515e7d70d4","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Add ability for permissions to do some database filtering.\n\nPermissions can add criterion if they're interested in filtering the\nclass being queried. AbstractHibernateCurator manages the creation of\nthe secured Criteria, so developers need to be sure to go through this\nmethod rather than grabbing a Criteria directly from the session.","Devan Goodwin",true],["dc1ba9f50d2eed0902055f3a40a720476fc4ebbf","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Apply permission query filters as an OR rather than an AND.\n\nIdea here is a multi-org principal would see nothing if he had two\npermissions, each restricting the results of the query to different\norgs.","Devan Goodwin",true],["25a588c41aeb55d26648d963f5b455c30e2fc042","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Remove an unused test entitlement cert.","Devan Goodwin",true],["1b5c84351bc700f5d4b118a83b0a4a009610acf2","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Add query filters for owner permission.\n\nThis helps to prevent accidental access to owners a user should not be\nable to see.\n\nBehaviour changes slightly for this in situations where you're trying to\nget access to something you can't have. A find by primary key will still\nreturn a forbidden, but a find by other properties will now just return\na not found. This is a small net gain in that it hides information about\nwhat exists and what doesn't from the caller. Given this is only for\nsituations where we're refusing access, it should not affect any\nlegitemate users or integrating apps.","Devan Goodwin",true],["c37811a0563abd3ceaa810d4b952d324327137cc","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Add a \"my consumers\" permission.\n\nOnly allows the user access to view/edit the consumers they registered.","Devan Goodwin",true],["633a72cb6e02d7403896acfc8d7aece5b32c5784","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Add ability for permissions to do some database filtering.\n\nPermissions can add criterion if they're interested in filtering the\nclass being queried. AbstractHibernateCurator manages the creation of\nthe secured Criteria, so developers need to be sure to go through this\nmethod rather than grabbing a Criteria directly from the session.","Devan Goodwin",true],["a09a75cb025b9cb0c5680f4289070e5c05248600","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Apply permission query filters as an OR rather than an AND.\n\nIdea here is a multi-org principal would see nothing if he had two\npermissions, each restricting the results of the query to different\norgs.","Devan Goodwin",true],["a8309ae5297d093445278757e2b097efd1abf837","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Remove an unused test entitlement cert.","Devan Goodwin",true],["a764da162d9a1f28ad7320556a9247a53c4143c0","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Add query filters for owner permission.\n\nThis helps to prevent accidental access to owners a user should not be\nable to see.\n\nBehaviour changes slightly for this in situations where you're trying to\nget access to something you can't have. A find by primary key will still\nreturn a forbidden, but a find by other properties will now just return\na not found. This is a small net gain in that it hides information about\nwhat exists and what doesn't from the caller. Given this is only for\nsituations where we're refusing access, it should not affect any\nlegitemate users or integrating apps.","Devan Goodwin",true],["0ed304e6eb9a008581435de7738998fefcc5dc24","0b0673a24b503096d6eb2ce2b957612fef92148d@redhat.com","Merge branch 'user-perms' of github.com:candlepin/candlepin into ckozak/user-perms\n\nConflicts:\n\tsrc/test/java/org/candlepin/resource/test/OwnerResourceTest.java","ckozak",true],["35a5f7d4cc48db308b924fbaf50c8ef482d88c11","0b0673a24b503096d6eb2ce2b957612fef92148d@redhat.com","Added permissions for other types","ckozak",true],["c06bdadd1be1a6f90852703def955c284f673601","0b0673a24b503096d6eb2ce2b957612fef92148d@redhat.com","Added more secure queries and fixed tests","ckozak",true],["750f1560d9b7493ab4536e328fd9f0248c331355","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Checkstyle.","Devan Goodwin",true],["38d1a498575f0600a60c8117262291d0bb5f6236","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Refactor dev/QE permissions model to support other types.\n\nPreviously we only could store owner permissions in our database,\nleaving us with no way to store and test other permission setups without\nwriting customized user services.\n\nTransition to a model where we store a PermissionBlueprint in the\ndatabase, which is just enough information for the PermissionFactory to\ncreate a Java Permission object with the data it needs. The Permission\nobject remains responsible for checking if it has access to some entity.","Devan Goodwin",true],["575f8e5772fca4a109747236be4ce8642fe22ab6","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Merge branch 'master' into dgoodwin/user-perms\n\nConflicts:\n\tsrc/main/resources/db/changelog/changelog-create.xml\n\tsrc/main/resources/db/changelog/changelog-update.xml","Devan Goodwin",true],["51a7645df0942568a6b657cc177a53bb7e9582a4","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","1030644: Possibly temporary performance fix for distributors with lots of ents.\n\nProblems with data serialization in the rules have exposed issue with\nconsumers with lots of entitlements. Current issue is for distributors\nwith 200+. As we do not care about status for these distributors, this\npatch disables compliance checking and just reports that everything is\nok.\n\nThis will possibly be reverted, as we need to investigate the actual\nissue for other types of consumers as well.","Devan Goodwin",true],["69facbe1fd808fdd4e683ff3527e21fc56299469","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Add a script testing bind performance.\n\nPer recent discussions this script exposes rapid degredation in bind\ntime as entitlements are added to a system. It does not however expose\nproblems with GET /consumer yet.","Devan Goodwin",true],["bfeb448d2089134583d9b4b50680ad9d204e67d5","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Begin hooking up username consumer permission.","Devan Goodwin",true],["cf61559294d777cbfd0281c259c45d9258f9435b","56761f31cfc9091ec6d5e7972ab653deb1e80a2a@redhat.com","Merge branch 'master' into dgoodwin/user-perms\n\nConflicts:\n\tsrc/main/java/org/candlepin/resource/ConsumerResource.java\n\tsrc/main/java/org/candlepin/resteasy/interceptor/BasicAuth.java\n\tsrc/main/resources/db/changelog/changelog-create.xml\n\tsrc/main/resources/db/changelog/changelog-update.xml\n\tsrc/test/java/org/candlepin/resteasy/interceptor/AuthInterceptorTest.java\n\tsrc/test/resources/log4j.properties","Devan Goodwin",true]],"size":193,"ref":"refs/heads/master","head":"efd05726e525ba357cdb4555dbc958d476586625"}