24 Commits (ab2acea463a474226317b203f25b4a288fc4b715)

Author	SHA1	Message	Date
Anthony Lapenna	f7480c4ad4	feat(api): prevent non administrator users to use admin restricted API endpoints (#3227)	5 years ago
Anthony Lapenna	7d76bc89e7	feat(api): relocate authorizations outside of JWT (#3079) ... * feat(api): relocate authorizations outside of JWT * fix(api): update user authorization after enabling the RBAC extension * feat(api): add PortainerEndpointList operation in the default portainer authorizations * feat(auth): retrieve authorization from API instead of JWT * refactor(auth): move permissions retrieval to function * refactor(api): document authorizations methods	5 years ago
Anthony Lapenna	8057aa45c4	feat(extensions): introduce RBAC extension (#2900)	6 years ago
Anthony Lapenna	14845a4a53	refactor(api): refactor base import path (#2788) ... * refactor(api): refactor base import path * fix(build-system): update build_binary_devops * fix(build-system): fix build_binary_devops for linux * fix(build-system): fix build_binary_devops for Windows	6 years ago
baron_l	7aa6a30614	feat(registry-manager): allow regular users to use the registry browse feature (#2664) ... * feat(registries): registries accessibility to all authorized people and not only admins * feat(registry): dockerhub settings for admin only * feat(registry): remove registry config access for non admin users * feat(api): use AuthenticatedAccess policy instead of RestrictedAccess for extensionList operation * refactor(api): minor update to security package * refactor(api): revert unexporting function changes * refactor(api): apply gofmt	6 years ago
Tolik Litovsky	6e8a10d72f	fix(api): remove x-frame-options header (#2322)	6 years ago
Anthony Lapenna	b24891a6bc	refactor(api): introduce libhttp usage (#2263)	6 years ago
Anthony Lapenna	8cd3964d75	feat(security): update secured headers and sanitize team name (#2167)	6 years ago
Ricardo Cardona Ramirez	e1e263d8c8	feat(UAC): change default ownership to admininstrators (#2137) ... * #960 feat(UAC): change ownership to admins for externally created ressources * feat(UAC): change ownership to admins for externally created resources Deprecated AdministratorsOnly js and go backend * #960 feat(UAC): remove AdministratorsOnly property and minor GUI fixes Update swagger definition changing AdministratorsOnly to Public * #960 feat(UAC): fix create resource with access control data * #960 feat(UAC): authorization of non-admin users for restricted operations On stacks, containers networks, services , tasks and volumes. * #960 feat(UAC): database migration to version 14 The administrator resources are deleted and Public resources are now managed by admins * #960 feat(UAC): small fixes from PR #2137 * #960 feat(UAC): improve the readability of the source code * feat(UAC) fix displayed ownership for Swarm related resources (#960)	6 years ago
Anthony Lapenna	61c285bd2e	feat(templates): introduce templates management (#2017)	6 years ago
Anthony Lapenna	d7ff14777f	refactor(api): restructure bolt package (#1981) ... * refactor(api): bolt package refactor * refactor(api): refactor bolt package	7 years ago
Anthony Lapenna	da5a430b8c	fix(api): add an authenticated access policy to the websocket endpoint (#1979) ... * fix(api): add an authenticated access policy to the websocket endpoint * refactor(api): centralize EndpointAccess validation * feat(api): validate id query parameter for the /websocket/exec endpoint	7 years ago
Anthony Lapenna	1e12057cdd	fix(api): review security policies when creating/updating a resource control (#1964)	7 years ago
Anthony Lapenna	e3d564325b	feat(stacks): support compose v2.0 stack (#1963)	7 years ago
Konstantin Azizov	55a96767bb	feat(security): add request rate limiter on authentication endpoint (#1866)	7 years ago
Anthony Lapenna	1162549209	feat(endpoint-groups): add endpoint-groups (#1837)	7 years ago
Anthony Lapenna	30dfd3d616	fix(api): manage registry authentication in the API (#1751)	7 years ago
Anthony Lapenna	b9a1c68ea0	feat(security): check user existence for each protected requests (#1679)	7 years ago
Anthony Lapenna	eb43579378	feat(storidge): introduce endpoint extensions and proxy Storidge API (#1661)	7 years ago
Anthony Lapenna	b5629c5b1a	feat(stacks): allow to use images from private registries in stacks (#1327)	7 years ago
Anthony Lapenna	92391254bc	feat(api): introduces swagger.yml (#1112)	7 years ago
Anthony Lapenna	3f085a977c	fix(UAC): allow a team member to delete a resource control (#1030)	7 years ago
Anthony Lapenna	08c5a5a4f6	feat(registries): add registry management (#930)	8 years ago
Anthony Lapenna	5523fc9023	feat(global): introduce user teams and new UAC system (#868)	8 years ago