fixes#19622
Resolve the 403 issue occurring when a robot account, equipped with both system and project scope, attempts to access project resources.
Signed-off-by: wang yan <wangyan@vmware.com>
* add permission validation for robot creating and updating.
It is not allowed to create an new robot with the access outside the predefined scope.
Signed-off-by: wang yan <wangyan@vmware.com>
* Fix robot testcase and update robot permission metadata (#167)
1. Fix robot testcase
2. update robot permission metadata
Signed-off-by: Yang Jiao <jiaoya@vmware.com>
Signed-off-by: wang yan <wangyan@vmware.com>
---------
Signed-off-by: wang yan <wangyan@vmware.com>
Signed-off-by: Yang Jiao <jiaoya@vmware.com>
Co-authored-by: Yang Jiao <72076317+YangJiao0817@users.noreply.github.com>
1. Add db index for subject_artifact_id in table artifact_accessory.
2. Optimize the SQL of excluding the accessory for artifact count.
Signed-off-by: chlins <chenyuzh@vmware.com>
1. Increase the default beego max memory and upload size from 32GB to
128GB.
2. Support customize the two beego configs from env.
Signed-off-by: chlins <chenyuzh@vmware.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
* modified label css to allow hover on it
Signed-off-by: Julien Michot <julien.michot.ext@exotec.com>
* modified label css to allow hover on it
Signed-off-by: Julien Michot <julien.michot.ext@exotec.com>
* Update common.scss
Signed-off-by: jmichot-exotec <150228661+jmichot-exotec@users.noreply.github.com>
* used title way to show full label on hover
Signed-off-by: Julien Michot <julien.michot.ext@exotec.com>
---------
Signed-off-by: Julien Michot <julien.michot.ext@exotec.com>
Signed-off-by: jmichot-exotec <150228661+jmichot-exotec@users.noreply.github.com>
Co-authored-by: Julien Michot <julien.michot.ext@exotec.com>
Enhance the API for triggering retention by optimizing it from synchronous to asynchronous to solve the problem of slow response in the case of a large number of tasks.
Signed-off-by: chlins <chenyuzh@vmware.com>
The permission api targets to return the full set of permissons for robot to use.
And only system and project admin have the access
Signed-off-by: wang yan <wangyan@vmware.com>
Check username when creating user by API
Replace comma with underscore in username for OnboardUser
Fixes#19356
Signed-off-by: stonezdj <daojunz@vmware.com>
* fix: Accessibility - change color for WCAG AA
Signed-off-by: julieng <julien.gattelier@gmail.com>
* fix: #ffffff to #fff to comply with stylelint
Signed-off-by: julieng <julien.gattelier@gmail.com>
* Factoring in #19249
Signed-off-by: julieng <julien.gattelier@gmail.com>
---------
Signed-off-by: julieng <julien.gattelier@gmail.com>
Add the new filed 'references' to the replication webhook payload, which
can help user better know the replicated artifact tags or digests.
(references is the lists of the artifact tag name or digest if no tag)
Signed-off-by: chlins <chenyuzh@vmware.com>
Nydus images are compatible with both docker scheme v2 and OCI image spec v1
types of config media type:
- application/vnd.oci.image.config.v1+json
- application/vnd.docker.container.image.v1+json
The patch fixes the media type recognition on the accessory type check.
Signed-off-by: Yan Song <yansong.ys@antgroup.com>
Co-authored-by: MinerYang <yminer@vmware.com>
In certain cases, the OCI client may push the subject artifact and accessory in either order.
Therefore, it is necessary to handle situations where the client pushes the accessory ahead of the subject artifact.
Signed-off-by: wang yan <wangyan@vmware.com>
In MustClone() it will set Sorts field twice, that will
generate two duplicated order by fields in the generated SQL.
Signed-off-by: bin liu <liubin0329@gmail.com>
