87 commits

Author	SHA1	Message	Date
David Kelly	0553dbdcb7	CR feedback	2016-12-16 17:17:10 -08:00
David Kelly	cb14b0e3e0	inital cut, passing fingerprint in ... does permissions same as mac address, more or less. Not exposed yet, just a beginning.	2016-12-14 16:09:13 -08:00
Stephen Birarda	143225a74c	add MAC permission table to domain-server and leverage	2016-11-18 14:40:22 -08:00
Stephen Birarda	39afb24982	explictly remove Agent from NIS for other Agents	2016-11-15 10:37:19 -08:00
humbletim	bf93483f87	allow assignment client scripts to create ATP assets	2016-10-26 11:22:33 -04:00
Seth Alves	f546524c1f	don't checkout for user membership in a null list of groups	2016-09-23 09:46:10 -07:00
Brad Hefta-Gaub	5d3d4bdbd9	add support for redirection on domain at max capacity	2016-09-21 18:12:38 -07:00
Seth Alves	ac4ecc9907	don't send a login-denied packet when we're still waiting for user's public key.	2016-08-19 14:10:27 -07:00
Seth Alves	3ca1ee1d82	Fix some group-related code to handle CamelCase usernames	2016-08-04 17:39:41 -07:00
Stephen Birarda	a1220b87f1	set key ID for verified user in right place	2016-08-02 14:35:51 -07:00
Stephen Birarda	760223a550	check for existing public key with lowercase username	2016-08-02 14:35:51 -07:00
Stephen Birarda	5d69c9c81e	fix sockaddr choice for local nodes	2016-08-02 14:35:11 -07:00
Stephen Birarda	b1e0e6d708	use replacement for IP address perms, not additive	2016-08-02 14:35:11 -07:00
Seth Alves	c72cfb165c	damnit	2016-07-29 18:33:06 -07:00
Seth Alves	2443166d78	update for new friends api	2016-07-29 16:41:17 -07:00
Seth Alves	ebdfede89f	switch to new friends api	2016-07-29 16:34:59 -07:00
Seth Alves	8e1820f911	make sure permissions have the correct ID in the case where a user has been verified	2016-07-29 13:10:14 -07:00
Seth Alves	390ee9aaeb	clean up some code, add some debugging prints	2016-07-27 14:03:32 -07:00
Seth Alves	8663b260f6	code review -- applyPermissionsForUser to setPermissionsForUser, don't take input permissions as an argument	2016-07-27 10:14:18 -07:00
Seth Alves	d69d5bff28	remove redundant call to userPerms.setVerifiedUserName	2016-07-27 10:06:02 -07:00
Seth Alves	a2d35df34e	fix a couple of mistakes made during code-review response	2016-07-27 09:57:57 -07:00
Seth Alves	bc2ded2f97	code review	2016-07-27 08:46:46 -07:00
Seth Alves	148793011d	code review	2016-07-27 07:55:09 -07:00
Seth Alves	82dfdebd46	move permissions for specific-users below groups. turn debug-prints back off	2016-07-22 14:14:03 -07:00
Seth Alves	8e5262872e	fix bug that was losing verified status for users with permissions specific to their account	2016-07-22 14:00:46 -07:00
Seth Alves	6ec8aff645	remove group-related debug prints	2016-07-22 12:02:17 -07:00
Seth Alves	adba4cde0b	book-keeping around groups and ranks	2016-07-22 11:40:23 -07:00
Seth Alves	97b40ab87d	adapting to api changes	2016-07-21 14:04:55 -07:00
Seth Alves	8e6b3ed8c2	rename variable to make its use more clear	2016-07-14 12:24:44 -07:00
Seth Alves	599b892296	refresh cached group information every 15 seconds	2016-07-14 11:20:57 -07:00
Seth Alves	e6f456f494	each rank in a group has its own permissions	2016-07-06 16:39:08 -07:00
Seth Alves	aae42e3802	updates to track zach's changes to api	2016-06-30 16:14:46 -07:00
Seth Alves	d4cc4bf1e4	represent node permissions as a bitfield rather than a list of bools	2016-06-27 14:55:13 -07:00
Seth Alves	ead6e476a9	add a list of blacklist groups which remove permissions rather than grant them	2016-06-24 14:03:43 -07:00
Seth Alves	cc1b6f0cb2	add a permissions-grid row for friends-of-domain-owner	2016-06-24 11:42:56 -07:00
Seth Alves	c97618f8bc	reduce the number of user public-key downloads during a login attempt	2016-06-21 11:40:55 -07:00
Seth Alves	82dd36459d	apply a group's permissions to users who belong to the group	2016-06-20 14:02:04 -07:00
Seth Alves	d184aade1b	comments	2016-06-16 16:40:57 -07:00
Seth Alves	e79767a121	authed username wasn't being saved in permissions, so that interface would get briefly disconnected when their permissions changed.	2016-06-11 15:16:02 -07:00
Seth Alves	4c45d081cd	merge from upstream	2016-06-10 19:57:46 -07:00
Stephen Birarda	12e5851ba4	fix connection denial message, put version back	2016-06-09 15:53:19 -07:00
Stephen Birarda	f963adb5dd	send connection denial for connect version mismatch	2016-06-09 15:53:19 -07:00
Seth Alves	7696ead012	look for standard permissions in standard table rather than in user table	2016-06-07 16:38:52 -07:00
Seth Alves	b2f63a2132	hook up can-rez-tmp and can-write-to-asset-server	2016-06-07 16:17:58 -07:00
Seth Alves	0c18df6278	don't restart domain-server if the only settings changes where permissions	2016-06-06 16:32:18 -07:00
Seth Alves	a4e4093a18	split permissions into two sets, one for 'standard' ones and one for specific users	2016-06-06 10:39:47 -07:00
Seth Alves	dd009bf8b9	add some debugging prints. make blacklisting work	2016-06-04 11:06:37 -07:00
Seth Alves	be403865fc	don't request public keys for the standard psuedo-account-names	2016-06-04 10:44:59 -07:00
Seth Alves	adf893ea19	rename AgentPermissions to NodePermissions	2016-06-04 09:50:36 -07:00
Seth Alves	09b0e3eaaf	use constants rather than bare strings for standard psuedo-account-names	2016-06-04 09:07:34 -07:00