fleet/server/fleet
Lucas Manuel Rodriguez da171d3b8d
Merge pull request from GHSA-pr2g-j78h-84cr
* Fix access control issues with users

* Fix access control issues with packs

* Fix access control issues with software

* Changes suggested by Martin

* All users can access the global schedule

* Restrict access to activities

* Add explicit test for team admin escalation vuln

* All global users should be able to read all software

* Handbook editor pass - Security - GitHub Security (#5108)

* Update security.md

All edits are recorded by line:

395 replaced “open-source” with “open source”
411 replaced “open-source” with “open source”
439 added “the” before “comment”; replaced “repositories,” with “repositories”
445 deleted “being” before “located”
458 added “and” after “PR”
489 replaced “on” with “in”
493 replaced “open-source” with “open source”; Replaced “privileges,” with “privileges”

* Update security.md

line 479

* Update security.md

added (static analysis tools used to identify problems in code) to line 479

* Fix UI

* Fix UI

* revert api v1 to latest in documentation (#5149)

* revert api v1 to latest in documentation

* Update fleetctl doc page

Co-authored-by: Noah Talerman <noahtal@umich.edu>

* Add team admin team policy automation; fix e2e

* Update to company page of the handbook (#5164)

Updated "Why do we use a wireframe-first approach?" section of company.md

* removed extra data on smaller screens (#5154)

* Update for team automations; e2e

* Jira Integration: Cypress e2e tests only (#5055)

* Update company.md (#5170)

This is to update the formatting under "empathy" and to fix the spelling of "help text."
This was done as per @mikermcneil .
This is related to #https://github.com/fleetdm/fleet/pull/4941 and https://github.com/fleetdm/fleet/issues/4902

* fix update updated_at for aggregated_stats (#5112)

Update the updated_at column when using ON DUPLICATE UPDATE so that
the counts_updated_at is up to date

* basic sql formatting in code ie whitespace around operators

* Fix e2e test

* Fix tests in server/authz

Co-authored-by: gillespi314 <73313222+gillespi314@users.noreply.github.com>
Co-authored-by: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com>
Co-authored-by: Michal Nicpon <39177923+michalnicp@users.noreply.github.com>
Co-authored-by: Noah Talerman <noahtal@umich.edu>
Co-authored-by: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Co-authored-by: Martavis Parker <47053705+martavis@users.noreply.github.com>
Co-authored-by: RachelElysia <71795832+RachelElysia@users.noreply.github.com>
2022-04-18 10:27:30 -07:00
..
policytest Migrate team-related endpoints to new pattern (#3740) 2022-01-19 10:52:14 -05:00
activities.go Add new activity types for policy-related activities (#4043) 2022-02-16 09:33:56 -06:00
agent_options.go Remove unneeded interfaces (#1779) 2021-08-24 18:49:56 -03:00
app.go Return the new recent_vulnerability_max_age config in the REST API config payload (#5107) 2022-04-13 12:05:57 -04:00
authz.go Merge pull request from GHSA-pr2g-j78h-84cr 2022-04-18 10:27:30 -07:00
campaigns.go Live queries post merge fixes (#2684) 2021-10-26 16:12:07 -03:00
carves.go Remove unneeded interfaces (#1779) 2021-08-24 18:49:56 -03:00
datastore.go Queue jobs for Jira integration when enabled and new vulnerabilities are found. (#4975) 2022-04-11 16:42:16 -04:00
db.go Add the fleetctl debug {errors,db-locks} sub-commands (#3168) 2021-12-06 09:26:01 -05:00
emails.go Remove unneeded interfaces (#1779) 2021-08-24 18:49:56 -03:00
errors.go Add support for downloading a list of hosts in CSV format (#4596) 2022-03-15 15:14:42 -04:00
fleetctl.go Remove kolide types and packages from backend (#974) 2021-06-06 15:07:29 -07:00
geoip.go Add public ip to hosts & derive geolocation when rendering host (#4652) 2022-03-21 12:29:52 -04:00
global_schedule.go Remove unneeded interfaces (#1779) 2021-08-24 18:49:56 -03:00
hosts_test.go Add HostLinuxOSs (#3217) 2021-12-07 15:37:00 -03:00
hosts.go Queue jobs for Jira integration when enabled and new vulnerabilities are found. (#4975) 2022-04-11 16:42:16 -04:00
invites.go Add update invite API (#2837) 2021-11-11 17:33:06 -03:00
jobs.go Merge jira-integration branch to main (#4949) 2022-04-05 12:56:15 -04:00
labels.go Use new error handling approach in other packages (#2954) 2021-11-22 09:13:26 -05:00
live_query_store.go Remove kolide types and packages from backend (#974) 2021-06-06 15:07:29 -07:00
logging.go Remove kolide types and packages from backend (#974) 2021-06-06 15:07:29 -07:00
meta.go Remove kolide types and packages from backend (#974) 2021-06-06 15:07:29 -07:00
network_interfaces.go Remove kolide types and packages from backend (#974) 2021-06-06 15:07:29 -07:00
osquery.go Remove unneeded interfaces (#1779) 2021-08-24 18:49:56 -03:00
packs_test.go Add team targets to pack spec (#4272) 2022-02-21 09:18:58 -07:00
packs.go Merge pull request from GHSA-pr2g-j78h-84cr 2022-04-18 10:27:30 -07:00
policies.go Allow updating the policy platform (part 1 of the ticket) (#4311) 2022-02-22 13:42:03 -05:00
queries_test.go Return 400 when trying to create packs, queries and policies with empty names (#3761) 2022-01-19 16:07:58 -03:00
queries.go Add team target filters to rego authorization checks for running queries (#4194) 2022-02-15 13:41:48 -05:00
query_results.go Remove kolide types and packages from backend (#974) 2021-06-06 15:07:29 -07:00
redis_pool.go Use a redis cluster-friendly store for rate limit (#2577) 2021-10-19 16:24:13 -04:00
scheduled_queries.go Fix duplicate schedules and platform matching on scheduled queries (#2977) 2021-11-17 19:03:30 -03:00
service.go Add read replica testing helpers and fix non-sso login bug (#4908) 2022-04-04 16:52:05 -07:00
sessions.go Remove expiration of API-only user tokens (#4314) 2022-02-22 08:12:03 -05:00
software.go Merge pull request from GHSA-pr2g-j78h-84cr 2022-04-18 10:27:30 -07:00
statistics.go Fix usage stats to send missing numLabels field (#3606) 2022-01-13 11:11:13 -06:00
targets_test.go Optimize requests on packs page (#3327) 2021-12-13 21:50:24 -08:00
targets.go Optimize requests on packs page (#3327) 2021-12-13 21:50:24 -08:00
teams.go Add team failing policies webhook (#4633) 2022-03-21 13:16:47 -06:00
traits.go Add support for downloading a list of hosts in CSV format (#4596) 2022-03-15 15:14:42 -04:00
translator.go Remove unneeded interfaces (#1779) 2021-08-24 18:49:56 -03:00
user_roles.go Remove unneeded interfaces (#1779) 2021-08-24 18:49:56 -03:00
users_test.go Migrate special-case endpoints to new pattern (#4511) 2022-03-08 11:27:38 -05:00
users.go Add team failing policies webhook (#4633) 2022-03-21 13:16:47 -06:00
utils.go Update links to documentation (#4163) 2022-02-10 19:26:18 -06:00