mirror of
https://github.com/bitwarden/server.git
synced 2024-11-26 12:55:17 +01:00
da4a86c643
* [AC-1117] Add manage permission (#3126) * Update sql files to add Manage permission * Add migration script * Rename collection manage migration file to remove duplicate migration date * Migrations * Add manage to models * Add manage to repository * Add constraint to Manage columns * Migration lint fixes * Add manage to OrganizationUserUserDetails_ReadWithCollectionsById * Add missing manage fields * Add 'Manage' to UserCollectionDetails * Use CREATE OR ALTER where possible * [AC-1374] Limit collection creation/deletion to Owner/Admin (#3145) * feat: update org table with new column, write migration, refs AC-1374 * feat: update views with new column, refs AC-1374 * feat: Alter sprocs (org create/update) to include new column, refs AC-1374 * feat: update entity/data/request/response models to handle new column, refs AC-1374 * feat: update necessary Provider related views during migration, refs AC-1374 * fix: update org create to default new column to false, refs AC-1374 * feat: added new API/request model for collection management and removed property from update request model, refs AC-1374 * fix: renamed migration script to be after secrets manage beta column changes, refs AC-1374 * fix: dotnet format, refs AC-1374 * feat: add ef migrations to reflect mssql changes, refs AC-1374 * fix: dotnet format, refs AC-1374 * feat: update API signature to accept Guid and explain Cd verbiage, refs AC-1374 * fix: merge conflict resolution * [AC-1174] CollectionUser and CollectionGroup authorization handlers (#3194) * [AC-1174] Introduce BulkAuthorizationHandler.cs * [AC-1174] Introduce CollectionUserAuthorizationHandler * [AC-1174] Add CreateForNewCollection CollectionUser requirement * [AC-1174] Add some more details to CollectionCustomization * [AC-1174] Formatting * [AC-1174] Add CollectionGroupOperation.cs * [AC-1174] Introduce CollectionGroupAuthorizationHandler.cs * [AC-1174] Cleanup CollectionFixture customization Implement and use re-usable extension method to support seeded Guids * [AC-1174] Introduce WithValueFromList AutoFixtureExtensions Modify CollectionCustomization to use multiple organization Ids for auto generated test data * [AC-1174] Simplify CollectionUserAuthorizationHandler.cs Modify the authorization handler to only perform authorization logic. Validation logic will need to be handled by any calling commands/controllers instead. * [AC-1174] Introduce shared CollectionAccessAuthorizationHandlerBase A shared base authorization handler was created for both CollectionUser and CollectionGroup resources, as they share the same underlying management authorization logic. * [AC-1174] Update CollectionUserAuthorizationHandler and CollectionGroupAuthorizationHandler to use the new CollectionAccessAuthorizationHandlerBase class * [AC-1174] Formatting * [AC-1174] Cleanup typo and redundant ToList() call * [AC-1174] Add check for provider users * [AC-1174] Reduce nested loops * [AC-1174] Introduce ICollectionAccess.cs * [AC-1174] Remove individual CollectionGroup and CollectionUser auth handlers and use base class instead * [AC-1174] Tweak unit test to fail minimally * [AC-1174] Reorganize authorization handlers in Core project * [AC-1174] Introduce new AddCoreAuthorizationHandlers() extension method * [AC-1174] Move CollectionAccessAuthorizationHandler into Api project * [AC-1174] Move CollectionFixture to Vault folder * [AC-1174] Rename operation to CreateUpdateDelete * [AC-1174] Require single organization for collection access authorization handler - Add requirement that all target collections must belong to the same organization - Simplify logic related to multiple organizations - Update tests and helpers - Use ToHashSet to improve lookup time * [AC-1174] Fix null reference exception * [AC-1174] Throw bad request exception when collections belong to different organizations * [AC-1174] Switch to CollectionAuthorizationHandler instead of CollectionAccessAuthorizationHandler to reduce complexity * Fix improper merge conflict resolution * fix: add permission check for collection management api, refs AC-1647 (#3252) * [AC-1125] Enforce org setting for creating/deleting collections (#3241) * [AC-1117] Add manage permission (#3126) * Update sql files to add Manage permission * Add migration script * Rename collection manage migration file to remove duplicate migration date * Migrations * Add manage to models * Add manage to repository * Add constraint to Manage columns * Migration lint fixes * Add manage to OrganizationUserUserDetails_ReadWithCollectionsById * Add missing manage fields * Add 'Manage' to UserCollectionDetails * Use CREATE OR ALTER where possible * [AC-1374] Limit collection creation/deletion to Owner/Admin (#3145) * feat: update org table with new column, write migration, refs AC-1374 * feat: update views with new column, refs AC-1374 * feat: Alter sprocs (org create/update) to include new column, refs AC-1374 * feat: update entity/data/request/response models to handle new column, refs AC-1374 * feat: update necessary Provider related views during migration, refs AC-1374 * fix: update org create to default new column to false, refs AC-1374 * feat: added new API/request model for collection management and removed property from update request model, refs AC-1374 * fix: renamed migration script to be after secrets manage beta column changes, refs AC-1374 * fix: dotnet format, refs AC-1374 * feat: add ef migrations to reflect mssql changes, refs AC-1374 * fix: dotnet format, refs AC-1374 * feat: update API signature to accept Guid and explain Cd verbiage, refs AC-1374 * feat: created collection auth handler/operations, added LimitCollectionCdOwnerAdmin to CurrentContentOrganization, refs AC-1125 * feat: create vault service collection extensions and register with base services, refs AC-1125 * feat: deprecated CurrentContext.CreateNewCollections, refs AC-1125 * feat: deprecate DeleteAnyCollection for single resource usages, refs AC-1125 * feat: move service registration to api, update references, refs AC-1125 * feat: add bulk delete authorization handler, refs AC-1125 * feat: always assign user and give manage access on create, refs AC-1125 * fix: updated CurrentContextOrganization type, refs AC-1125 * feat: combined existing collection authorization handlers/operations, refs AC-1125 * fix: OrganizationServiceTests -> CurrentContentOrganization typo, refs AC-1125 * fix: format, refs AC-1125 * fix: update collection controller tests, refs AC-1125 * fix: dotnet format, refs AC-1125 * feat: removed extra BulkAuthorizationHandler, refs AC-1125 * fix: dotnet format, refs AC-1125 * fix: change string to guid for org id, update bulk delete request model, refs AC-1125 * fix: remove delete many collection check, refs AC-1125 * fix: clean up collection auth handler, refs AC-1125 * fix: format fix for CollectionOperations, refs AC-1125 * fix: removed unnecessary owner check, add org null check to custom permission validation, refs AC-1125 * fix: remove unused methods in CurrentContext, refs AC-1125 * fix: removed obsolete test, fixed failling delete many test, refs AC-1125 * fix: CollectionAuthorizationHandlerTests fixes, refs AC-1125 * fix: OrganizationServiceTests fix broken test by mocking GetOrganization, refs AC-1125 * fix: CollectionAuthorizationHandler - remove unused repository, refs AC-1125 * feat: moved UserId null check to common method, refs AC-1125 * fix: updated auth handler tests to remove dependency on requirement for common code checks, refs AC-1125 * feat: updated conditionals/comments for create/delete methods within colleciton auth handler, refs AC-1125 * feat: added create/delete collection auth handler success methods, refs AC-1125 * fix: new up permissions to prevent excessive null checks, refs AC-1125 * fix: remove old reference to CreateNewCollections, refs AC-1125 * fix: typo within ViewAssignedCollections method, refs AC-1125 --------- Co-authored-by: Robyn MacCallum <robyntmaccallum@gmail.com> * refactor: remove organizationId from CollectionBulkDeleteRequestModel, refs AC-1649 (#3282) * [AC-1174] Bulk Collection Management (#3229) * [AC-1174] Update SelectionReadOnlyRequestModel to use Guid for Id property * [AC-1174] Introduce initial bulk-access collection endpoint * [AC-1174] Introduce BulkAddCollectionAccessCommand and validation logic/tests * [AC-1174] Add CreateOrUpdateAccessMany method to CollectionRepository * [AC-1174] Add event logs for bulk add collection access command * [AC-1174] Add User_BumpAccountRevisionDateByCollectionIds and database migration script * [AC-1174] Implement EF repository method * [AC-1174] Improve null checks * [AC-1174] Remove unnecessary BulkCollectionAccessRequestModel helpers * [AC-1174] Add unit tests for new controller endpoint * [AC-1174] Fix formatting * [AC-1174] Remove comment * [AC-1174] Remove redundant organizationId parameter * [AC-1174] Ensure user and group Ids are distinct * [AC-1174] Cleanup tests based on PR feedback * [AC-1174] Formatting * [AC-1174] Update CollectionGroup alias in the sproc * [AC-1174] Add some additional comments to SQL sproc * [AC-1174] Add comment explaining additional SaveChangesAsync call --------- Co-authored-by: Thomas Rittson <trittson@bitwarden.com> * [AC-1646] Rename LimitCollectionCdOwnerAdmin column (#3300) * Rename LimitCollectionCdOwnerAdmin -> LimitCollectionCreationDeletion * Rename and bump migration script * [AC-1666] Removed EditAnyCollection from Create/Delete permission checks (#3301) * fix: remove EditAnyCollection from Create/Delete permission check, refs AC-1666 * fix: updated comment, refs AC-1666 * [AC-1669] Bug - Remove obsolete assignUserId from CollectionService.SaveAsync(...) (#3312) * fix: remove AssignUserId from CollectionService.SaveAsync, refs AC-1669 * fix: add manage access conditional before creating collection, refs AC-1669 * fix: move access logic for create/update, fix all tests, refs AC-1669 * fix: add CollectionAccessSelection fixture, update tests, update bad reqeuest message, refs AC-1669 * fix: format, refs AC-1669 * fix: update null params with specific arg.is null checks, refs Ac-1669 * fix: update attribute class name, refs AC-1669 * [AC-1713] [Flexible collections] Add feature flags to server (#3334) * Add feature flags for FlexibleCollections and BulkCollectionAccess * Flag new routes and behaviour --------- Co-authored-by: Rui Tomé <108268980+r-tome@users.noreply.github.com> * Add joint codeownership for auth handlers (#3346) * [AC-1717] Update default values for LimitCollectionCreationDeletion (#3365) * Change default value in organization create sproc to 1 * Drop old column name still present in some QA instances * Set LimitCollectionCreationDeletion value in code based on feature flag * Fix: add missing namespace after merging in master * Fix: add missing namespace after merging in master * [AC-1683] Fix DB migrations for new Manage permission (#3307) * [AC-1683] Update migration script and introduce V2 procedures and types * [AC-1683] Update repository calls to use new V2 procedures / types * [AC-1684] Update bulk add collection migration script to use new V2 type * [AC-1683] Undo Manage changes to more original procedures * [AC-1683] Restore whitespace changes * [AC-1683] Clarify comments regarding explicit column lists * [AC-1683] Update migration script dates * [AC-1683] Split the migration script for readability * [AC-1683] Re-name SelectReadOnlyArray_V2 to CollectionAccessSelectionType * [AC-1648] [Flexible Collections] Bump migration scripts before feature branch merge (#3371) * Bump dates on sql migration scripts * Bump date on ef migrations --------- Co-authored-by: Robyn MacCallum <robyntmaccallum@gmail.com> Co-authored-by: Vincent Salucci <26154748+vincentsalucci@users.noreply.github.com> Co-authored-by: Vincent Salucci <vincesalucci21@gmail.com> Co-authored-by: Shane Melton <smelton@bitwarden.com> Co-authored-by: Rui Tomé <108268980+r-tome@users.noreply.github.com> |
||
---|---|---|
.. | ||
2017-08-19_00_InitialSetup.sql | ||
2017-08-22_00_LicenseCheckScripts.sql | ||
2017-08-30_00_CollectionWriteOnly.sql | ||
2017-09-06_00_CipherDetails.sql | ||
2017-09-08_00_OrgUserCounts.sql | ||
2017-10-25_00_OrgUserUpdates.sql | ||
2017-11-06_00_FamilyPlanAdjustments.sql | ||
2017-11-13_00_IndexTuning.sql | ||
2017-11-24_00_UpdateProcs.sql | ||
2017-12-12_00_Events.sql | ||
2018-02-28_00_LoginUris.sql | ||
2018-03-12_00_FixLoginUris.sql | ||
2018-03-21_00_AdminPortal.sql | ||
2018-04-02_00_Org2fa.sql | ||
2018-04-24_00_CipherQueryTuning.sql | ||
2018-06-11_00_WebVaultUpdates.sql | ||
2018-07-28_00_DbTuning.sql | ||
2018-08-14_00_UserKdf.sql | ||
2018-08-28_00_PremiumOrgAbilities.sql | ||
2018-09-25_00_OrgPurge.sql | ||
2018-10-17_00_ManagerRole.sql | ||
2018-12-19_00_OrgUserTwoFactorEnabled.sql | ||
2019-01-31_00_Transactions.sql | ||
2019-03-01_00_OrgApi.sql | ||
2019-05-01_00_CipherOrgDetailsFix.sql | ||
2019-05-15_00_GroupNameFixes.sql | ||
2019-05-28_00_CollectionCipherImprovements.sql | ||
2020-02-18_00_PolicySetup.sql | ||
2020-03-26_00_CipherSoftDelete.sql | ||
2020-04-01_00_CipherSoftDelete.sql | ||
2020-04-02_00_CipherSoftDelete.sql | ||
2020-04-09_00_CipherSoftDelete.sql | ||
2020-05-02_00_SprocPerfTweaks.sql | ||
2020-05-22_00_HiddenPassword.sql | ||
2020-06-23_00_OrgIdentifier.sql | ||
2020-06-24_00_SsoConfig.sql | ||
2020-06-25_00_ReferenceId.sql | ||
2020-07-17_00_ReferenceData.sql | ||
2020-07-20_00_OrgSso.sql | ||
2020-07-21_00_BulkDeleteCiphersAsOrgAdmin.sql | ||
2020-07-27_00_SsoUser.sql | ||
2020-07-28_00_SsoBound.sql | ||
2020-07-30_00_IdServerv4.sql | ||
2020-08-12_00_OrgIdentifierProc.sql | ||
2020-08-13_00_AllowNullMasterPassword.sql | ||
2020-08-19_00_AddIdentifierToOrgView.sql | ||
2020-08-19_00_SsoConfigGetAll.sql | ||
2020-08-28_00_OrgByIdentifierFix.sql | ||
2020-09-01_00_DeleteSsoUser.sql | ||
2020-09-01_01_DeleteSsoUser2.sql | ||
2020-09-02_00_DeleteSsoConfig.sql | ||
2020-10-06_00_Send.sql | ||
2020-10-08_00_DeleteOrgUserWithOrg.sql | ||
2020-10-14_00_OrgUserReadByUserIds.sql | ||
2020-10-20_00_OrgReadAbilities.sql | ||
2020-10-28_00_UserApiKey.sql | ||
2020-11-16_00_SalesTax.sql | ||
2020-11-18_00_EmergencyAccess.sql | ||
2020-12-04_00_OrgUserReadByOrgEmail.sql | ||
2020-12-06_00_OrgUserOrgDetailsReadByUserIdStatusOrgId.sql | ||
2020-12-14_00_Permissions.sql | ||
2021-01-05_00_ReturnRevisionDateOnCipherRestore.sql | ||
2021-01-28_00_AddDeleteSendsToUserDeleteById.sql | ||
2021-02-26_00_EmergencyAccess_ReadToNotify.sql | ||
2021-03-04_00_Installation_Enlarge_Email_Column.sql | ||
2021-03-04_01_User_Enlarge_Email_Column.sql | ||
2021-03-04_02_Organization_Enlarge_Email_Column.sql | ||
2021-03-04_03_OrganizationUser_Enlarge_Email_Column.sql | ||
2021-03-04_04_EmergencyAccess_Enlarge_Email_Column.sql | ||
2021-03-22_00_Send_Add_HideEmail_Column.sql | ||
2021-03-23_00_AddResetPasswordKey.sql | ||
2021-03-26_00_CipherDeletedIndex.sql | ||
2021-04-07_00_IncreaseOrgSeatSize.sql | ||
2021-04-16_00_OrganizationUser_DeleteMany.sql | ||
2021-04-27_00_OrganizationUser_UpsertMany.sql | ||
2021-04-28_00_OrgResetPasswordAbilityAndRsaKeys.sql | ||
2021-04-30_00_Select_Known_OrganizationUsers_Emails.sql | ||
2021-05-04_00_CipherPasswordPromptFixed.sql | ||
2021-05-11_00_BulkReinvite.sql | ||
2021-05-18_00_BulkConfirm.sql | ||
2021-05-27_00_SetQuotedIdentifier.sql | ||
2021-07-07_00_FixBulkConfirm.sql | ||
2021-07-08_00_EntityFrameworkSupport.sql | ||
2021-07-13_00_UserForcePasswordReset.sql | ||
2021-07-15_00_OrganizationUserReadByMinimumRole.sql | ||
2021-07-22_00_FixCollectionReadBy.sql | ||
2021-07-22_00_Provider.sql | ||
2021-08-12_00_ReadByMinimumRoleCheckStatus.sql | ||
2021-08-18_00_AutoscaleOrganizationsSeats.sql | ||
2021-08-19_00_FixTaxRate.sql | ||
2021-09-02_00_SsoUserReadyByUserIdOrganizationId.sql | ||
2021-09-10_00_DeleteProviderUser.sql | ||
2021-09-16_00_PolicyApplicableToUser.sql | ||
2021-09-21_01_SplitManageCollectionsJson.sql | ||
2021-10-21_00_DefaultAutoscaleLimitToCurrentSeats.sql | ||
2021-11-01_00_FixPolicyApplicableToUser.sql | ||
2021-11-02_00_OrganizationSponsorship.sql | ||
2021-11-08_00_KeyConnector.sql | ||
2021-11-09_00_DropUsesCryptoAgent.sql | ||
2021-11-12_00_KeyConnectorFlag.sql | ||
2021-11-18_00_MergeKeyConnectorAndFFE.sql | ||
2021-11-23_00_NullOrganizationSponsorshipOnFkDelete.sql | ||
2021-11-30_00_NullOrganizationSponsorshipOnOrgDelete.sql | ||
2022-01-21_00_RemoveU2F.sql | ||
2022-02-10_00_FailedLoginCaptcha.sql | ||
2022-03-01_00_AddApiKeysTable.sql | ||
2022-04-06_00_SponsorshipBulkActions.sql | ||
2022-04-13_00_OrganizationSponsorshipUpdates.sql | ||
2022-04-14_00_ReadOrganizationConnectionsByOrganizationId.sql | ||
2022-04-15_00_FixOrganizationConnectionCreate.sql | ||
2022-04-20_00_AddInstalltionIdToEvents.sql | ||
2022-05-10_00_RebuildMetadata.sql | ||
2022-05-23_00_OrgUserDelete.sql | ||
2022-05-24_00_DeviceUnknownVerification.sql | ||
2022-05-31_00_CipherOrganizationDetails.sql | ||
2022-06-08_00_DeactivatedUserStatus.sql | ||
2022-06-24_00_UseScimFlag.sql | ||
2022-07-15_00_FixOrgUserDetails.sql | ||
2022-07-19_00_FixUseScimFlag.sql | ||
2022-07-20_00_ProviderOrganizationListDetails.sql | ||
2022-07-28_00_CheckPoliciesOnRestore.sql | ||
2022-09-08_00_CipherMovePermissions.sql | ||
2022-09-12_00_AuthRequestInit.sql | ||
2022-09-12_01_AuthRequestUpdate.sql | ||
2022-09-20_00_AvatarColor.sql | ||
2022-09-26_00_EventsSystemUser.sql | ||
2022-10-11_00_UseCustomPermissionsFlag.sql | ||
2022-10-24_00_AuthRequestAddApprovedColumn.sql | ||
2022-10-24_00_CollectionManagement.sql | ||
2022-10-24_01_ReadGroupsWithCollectionsByOrgId.sql | ||
2022-10-25_00_CollectionsWithGroupsAndUsers.sql | ||
2022-11-03_00_OrganizationDomainInit.sql | ||
2022-11-18_00_PolicyReadByUserIdRemoveEnabledOrgCheck.sql | ||
2022-12-08_00_EventsDomainName.sql | ||
2022-12-08_00_OrgUserGroupsAndCollections.sql | ||
2022-12-26_00_ProviderAddProviderTypeBillingPhone.sql | ||
2023-01-06_00_SecretsManager.sql | ||
2023-01-13_00_AddAvatarColorToEmergencyAccess.sql | ||
2023-01-15_00_KDFOptions.sql | ||
2023-01-17_00_SecretsManagerOrganizationUser.sql | ||
2023-01-18_00_FixOrganizationDeleteOrgDomain.sql | ||
2023-01-20_00_OrganizationStatus.sql | ||
2023-01-20_00_SecretsManager_Admin_Fix.sql | ||
2023-01-23_00_AddAvatarToOrganizationUsers.sql | ||
2023-01-24_00_AutoscalingProviderOrgFixes.sql | ||
2023-01-26_00_FixUserReadKdfByEmail.sql | ||
2023-02-01_00_LastUserDates.sql | ||
2023-02-06_00_ProviderReadByOrganizationId.sql | ||
2023-02-14_00_RevokeApiKeys.sql | ||
2023-02-16_00_SecretsManagerEvent.sql | ||
2023-02-16_00_SelfHostedOrganizationDetails.sql | ||
2023-02-16_FixSsoAvailableOrganizationDomain.sql | ||
2023-02-22_FixOrganizationUserUserDetailsViewOutOfSync.sql | ||
2023-02-22_FixReturningExpiredDomainsAfterSpecifiedPeriod.sql | ||
2023-03-08_OrganizationProviderType.sql | ||
2023-03-10_00_OrganizationUserReadByUserIdWithPolicyDetails.sql | ||
2023-03-15_AuthRequestRemoveFingerprintPhrase.sql | ||
2023-03-22_00_ProviderAddExistingOrganizations.sql | ||
2023-03-30_00_RemovePolicyCheckOrganizationDomainSsoDetais.sql | ||
2023-04-13_00_ProviderReadCountByOrganizationIds.sql | ||
2023-04-21_00_CipherRestoreByIdsOrganizationId.sql | ||
2023-04-21_00_DeleteAccessPoliciesOnOrganizationDelete.sql | ||
2023-04-26_00_FixOrganizationView.sql | ||
2023-04-26_01_FixOrganizationStatus.sql | ||
2023-05-03_00_ProviderUserReadByOrganizationIdStatus.sql | ||
2023-05-08-00_WebAuthnLoginCredentials.sql | ||
2023-05-16_00_ClientSecretHash.sql | ||
2023-05-18_00_UserHasMasterPassword.sql | ||
2023-05-21_00_AddKeysToDevice.sql | ||
2023-05-27_00_OrganizationSecretsManagerBillingColumns.sql | ||
2023-06-01_00_TdeAdminApproval.sql | ||
2023-06-07_00_DropUnusedCollectionSprocs.sql | ||
2023-06-07_01_DropUnusedPolicySprocs.sql | ||
2023-06-27_00_AuthRequestExpirationUpdates.sql | ||
2023-07-10_00_FixTdeAdminApprovalEmail.sql | ||
2023-07-17_00_DeleteUserSproc.sql | ||
2023-07-18_00_OrganizationUserReadByUserIdWithPolicyDetails.sql | ||
2023-07-24_00_OrgUserReadOccupiedSmSeatCountByOrgId.sql | ||
2023-07-26_00_SecretsManagerBetaColumn.sql | ||
2023-08-03_00_PopulateResellerNames.sql | ||
2023-08-04_00_SecretsManagerBetaColumnData.sql | ||
2023-08-09_00_OrgAbilitiesUsePolicies.sql | ||
2023-08-10_00_ClientSecretHashDataMigration.sql | ||
2023-08-10_01_RemoveClientSecret.sql | ||
2023-08-16_00_HotfixRevertOrganizationUserReadByUserIdWithPolicyDetails.sql | ||
2023-09-11_00_2023-01-FutureMigration.sql | ||
2023-09-11_01_2023-02-FutureMigration.sql | ||
2023-09-14_00_Remove_WebAuthn_For_Free_Users.sql | ||
2023-09-27_00_CipherKeyUpdate.sql | ||
2023-09-29_00_OrgDomainReadByIdOrgId.sql | ||
2023-10-03_00_OrganizationReadOwnerEmailAddresses.sql | ||
2023-10-05_00_OrgConnectionsReadByIdOrgId.sql | ||
2023-10-09_00_Event_ReadPageByOrganizationIdServiceAccountId.sql | ||
2023-10-24_00_LimitCollectionCreationDeletion.sql | ||
2023-10-24_01_CollectionManagePermission.sql | ||
2023-10-24_02_CollectionManagePermission.sql | ||
2023-10-24_03_BulkAddCollectionAccess.sql |