aboutsummaryrefslogtreecommitdiffstats
path: root/dashboard/app/access.go
Commit message (Collapse)AuthorAgeFilesLines
* dashboard/app: fix admin checks for dev_appserverDmitry Vyukov2025-12-221-2/+9
| | | | | | Admin checks broke at some point for local app runs (the auth domain is overriden only in tests). Restore proper checking for dev_appserver.
* dashboard: add missing access check for fsck logsAleksandr Nogikh2025-04-231-0/+2
| | | | | | | To make them accessible for non-admins, we need explicit checks in access.go. Extend TestAccess to cover fsck logs.
* dashboard/app: introduce authorized PublicAccessTaras Madan2024-10-241-16/+17
|
* dashboard/app: unit test accessLevelTaras Madan2024-10-181-13/+16
|
* dashboard/app: authenticate by the gcloud generated tokenTaras Madan2024-10-101-1/+19
| | | | Closes #5377
* dashboard: allow multiple allowed authentication domainsFlorent Revest2024-10-101-1/+11
| | | | | | | In some situations, it could be useful to share access to the dashboard to multiple authentication domains. The current GlobalConfig format doesn't really allow it so this deprecates the existing field and add a new slice of allowed authentication domains.
* dashboard: make repro logs publicAndrey Konovalov2024-07-101-0/+9
| | | | | PR #4837 added displaying successfull repro logs to syzbot but didn't make the logs publicly-accessible. Fix that.
* all: fix up context import after go fixDmitry Vyukov2024-04-261-1/+1
|
* all: go fix everythingDmitry Vyukov2024-04-261-1/+1
|
* dashboard: access config through contextAleksandr Nogikh2023-10-121-4/+5
| | | | | | | | | | | | | | | | | | | | | We used to have a single global `config` variable and access it throughout the whole dashboard application. However, this approach has been more and more complicated test writing -- sometimes we want the config to be only slightly different, so that it's not worth it adding new namespaces, sometimes we have to test how dashboard handles config changes over time. This has already led to a number of hacky contextWithXXX methods that mocked various parts of the global variable. The rest of the code had to sometimes still use `config` directly and sometimes invoke getXXX(c) methods. This is very inconsistent and prone to errors. With more and more situations where we need to patch the config appearing (see #4118), let's refactor the application to always access config via the getConfig(c) method. This allows us to uniformly patch the config and be sure that the non-patched copy is not accessible from anywhere else.
* all: use special placeholder for errorsTaras Madan2023-07-241-6/+6
|
* dashboard/app: change client errors formatTaras Madan2023-05-091-2/+2
|
* dashboard: log URLs for unauthorized accessesAleksandr Nogikh2023-02-241-1/+2
|
* dashboard/app: return 4xx instead of 5xx for user requestsTaras Madan2022-05-131-2/+2
| | | | | | | | * dashboard/app: return 4xx instead of 5xx for user requests 5xx category signals the Internal Server Errors and require server developers attention. 4xx category means client side problem and doesn't require server developers attention. Added tests.
* dashboard/app: update to go116 (#2959)Taras Madan2022-01-051-3/+3
| | | | | | 1. Updated the "include"s. 2. No logs read API in the AppEngine anymore. Replaced by the GCP logging API. 3. Use "GO111MODULE=off gcloud beta app deploy ./dashboard/app/app.yaml --no-promote" to test new deployment. 4. Updated the documentation.
* dashboard/app: fix up machine info handlingDmitry Vyukov2020-09-141-0/+5
| | | | | | | | | Assorted local fixes fixes, like dedup machine info in the database, fix up HTML table markup, enforce and check access to the machine info entities, etc. Follow up to #2085 Fixes #466
* all: fix comments formatDmitry Vyukov2020-07-121-1/+1
| | | | | | | Fix capitalization, dots at the end and two spaces after a period. Update #1876
* dashboard/app: fix testing for go1.11 runtimeDmitry Vyukov2020-01-291-2/+4
| | | | | | | | | | 0. Remove aetest build tag. We don't need it anymore, go test should work. 1. IsDevAppServer does not return true in tests anymore, so don't use it 2. Use a different mechanism to register test/prod config. We don't have aetest tag anymore, so we need something even more dynamic. 3. Fix new golangci-lint warnings: all test files are checked now. Update #1461
* dashboard: update to go111 runtimeAndrew Donnellan2020-01-291-1/+1
| | | | | | | | | The old go 1.9 App Engine runtime is now deprecated. Update to the go 1.11 runtime, which still allows us to use the old App Engine library (removed in the 1.12 runtime). Closes: #1461 ("dashboard: port app to go111/go112 runtime") Signed-off-by: Andrew Donnellan <ajd@linux.ibm.com>
* dashboard/app: add link to bug to reproducersDmitry Vyukov2019-10-251-17/+17
| | | | | As requested by users. Fixes #1396
* dashboard/app: don't log user errors in checkCrashTextAccess tooDmitry Vyukov2019-10-251-9/+12
| | | | This pollutes error logs too.
* dashboard/app: don't log errors that can be caused by bad user requestsDmitry Vyukov2019-10-251-1/+5
|
* dashboard/app: add invalid bugs pageDmitry Vyukov2019-05-271-2/+3
| | | | | | | | Currently it's not possible to list all invalid bugs. Add a page that does this. It's not referenced from anywhere as it's unclear who/when needs it on periodic basis. But if the list is needed for something one-off, we have it.
* dashboard/app: import datastore as dbDmitry Vyukov2019-03-221-5/+5
| | | | | datastore is too long name for such widely used packages. Import it as db throughout. Nicely reduces line lengths.
* dashboard/app: add Log text entityDmitry Vyukov2019-03-171-0/+2
| | | | | | To store bisection logs. Update #501
* dashboard/app: use links instead of attachments in emailsDmitry Vyukov2018-03-251-17/+83
| | | | | As per discussion at: https://groups.google.com/d/msg/syzkaller/zYlQ-b-QPHQ/AJzpeObcBAAJ
* dashboard/app: fix 2 crashes on invalud input dataDmitry Vyukov2018-03-071-1/+1
|
* dashboard/app: finer-grained access controlDmitry Vyukov2018-02-141-0/+106
This is the bulk of work for opening dashboard. Implement finer-grained access control (admin/user/public). Show only info designated to the current user access level. Rework UIs for more clarity re bug statuses. Show fixed bug.