Add options to create default and admin roles#5843

Draft

mikemountain wants to merge 55 commits into

mainfrom

mikemountain-add-create-default-and-admin-role-options

Commits on Jun 18, 2025

Create function to define valid set of scopes for each resource (#5558)

dkanney
authored and
mikemountain
committed
test(grants): GrantsForUsers tests for Group resource (#5443)

dkanney
authored and
mikemountain
committed
feat: Define new grants tables (#5486)

authored and
mikemountain
committed
add name scope id unique constraints to all iam_role tables (#5623)

bosorawis
authored and
mikemountain
committed
Bosorawis domain iam role subtypes (#5626)

bosorawis
authored and
mikemountain
committed
bosorawis sql split global grants scope table (#5638)

bosorawis
authored and
mikemountain
committed
bosorawis domain iam implement getRoleScopeType (#5629)

authored and
mikemountain
committed
domain: iam: upgrade repository code to use new tables (#5643)

authored and
mikemountain
committed
Domain: iam: Repository: update list-grant-scope and test setup to use new model (#5679)

authored and
mikemountain
committed
feat: grantsForUser for Global Resources (#5612)

authored and
mikemountain
committed
Bosorawis domain iam implement role grant scopes all (#5701)

authored and
mikemountain
committed
feat: add grant_this_role_scope column to iam_role_project (#5738)

bosorawis
authored and
mikemountain
committed
feat: grantsForUser for Org resources (#5663)

dkanney
authored and
mikemountain
committed
feat: grantsForUser for Project resources (#5669)

dkanney
authored and
mikemountain
committed
Change reqScope parameter type from `Scope` to `string` (#5748)

dkanney
authored and
mikemountain
committed
Test: GrantsForUser for Accounts for various user to role relationships (#5631)

dkanney
authored and
mikemountain
committed
feat: grantsForUser for recursive Global or Org resources (#5747)

dkanney
authored and
mikemountain
committed
feat: grantsForUser for recursive Project resources (#5783)

dkanney
authored and
mikemountain
committed
feat: migration hook grants refactor (#5733)

authored and
mikemountain
committed
feat: grantsForUser for Global/Org/Project resources (#5807)

dkanney
authored and
mikemountain
committed
feat: grants: add resource type parameters to GrantsForUser (#5750)

bosorawis
authored and
mikemountain
committed
Support previous grants use-cases (#5823)

authored and
mikemountain
committed
Migrate roles and grants to new table structure (#5814)

mikemountain
and
bosorawis
committed
Refactor GrantsForUser subqueries to use aggregate functions (#5822)

dkanney
authored and
mikemountain
committed
fix broken test (#5842)
mikemountain
committed
update tests to not check a table that will be dropped in the migration (#5847)
mikemountain
committed
Fix global scope's parent scope id (#5844)

dkanney
authored and
mikemountain
committed
Clean up migrated tables (#5837)
mikemountain
committed
fix broken sql from removing iam role grant scope (#5860)

bosorawis
and
mikemountain
committed
test(groups): add grants tests for groups API (#5403)

bosorawis
authored and
mikemountain
committed
feat: add grants tests for billing resource (#5559)

authored and
mikemountain
committed
Add grants tests for accounts (#5566)

bosorawis
authored and
mikemountain
committed
test(credentials): Add grants tests (#5608)

dkanney
authored and
mikemountain
committed
feat: add grants tests for alias (#5550)

authored and
mikemountain
committed
test: add grants tests for host_catalogs (#5573)

authored and
mikemountain
committed
Add grants tests for authmethods (#5569)

dkanney
authored and
mikemountain
committed
test(hostsets): add grants tests (#5591)

dkanney
authored and
mikemountain
committed
test: credentials store grants (#5592)

bosorawis
authored and
mikemountain
committed
test: add grants tests for managed groups resource (#5642)
mikemountain
committed
test: add grants tests for auth tokens resource (#5644)
mikemountain
committed
add authorized actions tests for resources with sub-resources (#5835)

bosorawis
authored and
mikemountain
committed
bosorawis remove TestRoleGrantsForToken (#5840)

bosorawis
authored and
mikemountain
committed
Remove old test Role creation code

dkanney
authored and
mikemountain
committed
update go mod
mikemountain
committed
run make gen and move new migrations to new folder (#5862)
mikemountain
authored
test: add grants tests for session resource (#5855)
bosorawis
committed
API: add CreateDefaultRole and CreateAdminRole options

mikemountain
authored and
bosorawis
committed
Add CreateDefaultRole and CreateAdminRole options

mikemountain
authored and
bosorawis
committed
repo: add CreateDefaultRole and CreateAdminRole options

mikemountain
authored and
bosorawis
committed
rerun make gen
bosorawis
committed

Commits on Jun 19, 2025