mirror of
https://github.com/project-zot/zot.git
synced 2024-12-16 21:56:37 -05:00
336526065f
BREAKING CHANGE: repository paths are now specified under a new config key called "repositories" under "accessControl" section in order to handle "groups" feature. Previously the repository paths were specified directly under "accessControl".
This PR adds the ability to create groups of users which can be used for authZ policies, instead of just users.
{
"http": {
"accessControl": {
"groups": {
Just like the users, groups can be part of repository policies/default policies/admin policies. The 'groups' field in accessControl can be missing if there are no groups. The permissions priority is user>group>default>admin policy, verified in this order (in authz.go), and permissions are cumulative. It works with LDAP too, and the group attribute name is configurable. The DN of the group is used as the group name and the functionality is the same. All groups for the given user are added to the context in authn.go. Repository paths are now specified under a new keyword called "repositories" under "accessControl" section in order to handle "groups" feature.
Signed-off-by: Ana-Roberta Lisca <ana.kagome@yahoo.com>
|
||
|---|---|---|
| .. | ||
| cli.go | ||
| client.go | ||
| client_elevated_test.go | ||
| client_test.go | ||
| client_utils_test.go | ||
| config_cmd.go | ||
| config_cmd_test.go | ||
| config_reloader.go | ||
| config_reloader_test.go | ||
| cve_cmd.go | ||
| cve_cmd_test.go | ||
| discover.go | ||
| extensions_test.go | ||
| image_cmd.go | ||
| image_cmd_test.go | ||
| minimal.go | ||
| repo_cmd.go | ||
| root.go | ||
| root_test.go | ||
| searcher.go | ||
| service.go | ||
| stress_test.go | ||