ngcp-panel

Commit Graph

Author	SHA1	Message	Date
Kirill Solomko	9d021be65a	MT#59979 add license control * UI and API parts are now under license control * new Util::License::get_license($c, $name) - fetches license status by name (1 if enabled, and also if /proc/ngcp/check if 'ok') * add Catalyst::Plugins::NGCP::License with license($name) to fetch valid license by name from anywhere using $c->license('pbx') or from the templates using c.license('pbx'). It internally uses Util::License::get_license($c, $name) * License::get_license_status($c) now requires $c as first argument as well logs license status check errors. * new ActionRoles::License that enables usage of :Does(License) RequiresLicense('pbx') LicenseDetachTo('/denied_page') in the Controller chains * Add license control for UI elements and return 403 Forbidden if a resource is covered by licenses and the license is not active * Hide UI elements if a license is not active * API/Entities/Entities new $c->set_config key: - per endpoint: $c->set_config({ required_licenses => [qw/pbx device_provisioning/] } - or per method: $c->set_config({ required_licenses => { POST => [qw/pbx device_provisioning/] } } } * In case if an API endpoint does not have a license: 403 Forbidden "Invalid license" reply is returned. * Add license based restrictions to API endpoints * /api documentation: - completely hide endpoints that do not have an active license - hide only methods that does not have an active license Change-Id: Iba45fc5068b02306a617fed7b5405f2210574b61	2 years ago
Rene Krenn	308a974059	MT#58762 harmonize restapi wildcard filters - all standard LIKE search are migrated - will avoid LIKE unless a pattern (* wildcard) is used as a search term. this encourage db index usage, will be faster - supports wildcard escape sequence \\* - harmonize swagger UI descriptions of filters Change-Id: Iea155871c9be6c284e6970a562d4e6af73fedc4b	2 years ago
Kirill Solomko	cec12f7b1e	MT#58333 rework /api/phonebookentries * /api/phonebookentries is now split into 3 parts * /api/resellerphonebookentries * /api/customerphonebookentries * /api/subscriberphonebookentries main reason is because there are 3 different contexts (tables) that in the end return "id" which is also a resource identifier and it is not unique because the contexts handle their own ids, another reason is to simplify code and access definitions, as well as to have solid and easy representation. * /api/resllerphonebookentries * can be accessed by 'admin', 'reseller' roles * /api/customerphonebookentries * can be accessed by 'admin', 'reseller', 'subscriberadmin' roles * fix contract_id field to be correctly represented as 'customer_id' * /api/subscriberphonebookentries * can be accessed by 'admin', 'reseller', 'subscriberadmin', 'subscriber' roles * add 'shared' query filter * all the new endpoints * no more required query param fields * customer_id is now optional query parameter filter * add valid/existing resource checks for POST/PATCH/PUT ops * add correct auto filtering based on the user's role * various major code simplifications, fixes and code style improvements * csv download now also allows query param filters to be applied * fix documentation Change-Id: I735df96b7a7e18006a46b82a4fcc603e400ad9e6	2 years ago

Author

SHA1

Message

Date

Kirill Solomko

9d021be65a

MT#59979 add license control

* UI and API parts are now under license control
* new Util::License::get_license($c, $name)
  - fetches license status by name (1 if enabled, and also if
    /proc/ngcp/check if 'ok')
* add Catalyst::Plugins::NGCP::License with license($name)
  to fetch valid license by name from anywhere using
  $c->license('pbx') or from the templates using c.license('pbx').
  It internally uses Util::License::get_license($c, $name)
* License::get_license_status($c) now requires $c as first argument
  as well logs license status check errors.
* new ActionRoles::License that enables usage of
  :Does(License) RequiresLicense('pbx') LicenseDetachTo('/denied_page')
  in the Controller chains
* Add license control for UI elements and return 403 Forbidden
  if a resource is covered by licenses and the license is not active
* Hide UI elements if a license is not active
* API/Entities/Entities new $c->set_config key:
    - per endpoint:
      $c->set_config({
        required_licenses => [qw/pbx device_provisioning/]
      }
    - or per method:
      $c->set_config({
        required_licenses => {
            POST => [qw/pbx device_provisioning/]
        }
      }
  }
* In case if an API endpoint does not have a license:
  403 Forbidden "Invalid license" reply is returned.
* Add license based restrictions to API endpoints
* /api documentation:
  - completely hide endpoints that do not have an active license
  - hide only methods that does not have an active license

Change-Id: Iba45fc5068b02306a617fed7b5405f2210574b61

Rene Krenn

308a974059

MT#58762 harmonize restapi wildcard filters

- all standard LIKE search are migrated
- will avoid LIKE unless a pattern (* wildcard) is
  used as a search term. this encourage db index
  usage, will be faster
- supports wildcard escape sequence \\*
- harmonize swagger UI descriptions of filters

Change-Id: Iea155871c9be6c284e6970a562d4e6af73fedc4b

Kirill Solomko

cec12f7b1e

MT#58333 rework /api/phonebookentries

* /api/phonebookentries is now split into 3 parts
  * /api/resellerphonebookentries
  * /api/customerphonebookentries
  * /api/subscriberphonebookentries
  main reason is because there are 3 different contexts (tables)
  that in the end return "id" which is also a resource identifier
  and it is not unique because the contexts handle their own ids,
  another reason is to simplify code and access definitions, as well
  as to have solid and easy representation.
* /api/resllerphonebookentries
  * can be accessed by 'admin', 'reseller' roles
* /api/customerphonebookentries
  * can be accessed by 'admin', 'reseller', 'subscriberadmin' roles
  * fix contract_id field to be correctly represented as 'customer_id'
* /api/subscriberphonebookentries
  * can be accessed by 'admin', 'reseller', 'subscriberadmin',
    'subscriber' roles
  * add 'shared' query filter
* all the new endpoints
  * no more required query param fields
  * customer_id is now optional query parameter filter
  * add valid/existing resource checks for POST/PATCH/PUT ops
  * add correct auto filtering based on the user's role
* various major code simplifications, fixes and code style improvements
* csv download now also allows query param filters to be applied
* fix documentation

Change-Id: I735df96b7a7e18006a46b82a4fcc603e400ad9e6

3 Commits (b0b646db5b91d42c9f043340b1b41614cd4edac9)