899f0dc2cb
* do not swallow ControlGroupErrors when viewing or editing kvv2 secrets * test kv v2 control group workflow * do not manually clearModelCache when logging out since this already happens when leaving the logout route * remove pauseTest * update comments * wip - looking into why restricted user can see the control group protected secret after it has already been unwrapped once * strip version from query params so we can unwrap a secret after it is authorized * use attachCapabilities instead of lazyCapabilities to ensure models are cleaned up properly * remove comment * make ControlGroupError extend AdapterError * fix broken redirect_to test * one day i will remember to remove my debugger statements; today is not that day * no need to check for a ControlGroupError since it extends an AdapterError * see if using EmberError instead of AdapterError fixes the browserstack tests * Revert "see if using EmberError instead of AdapterError fixes the browserstack tests" This reverts commit 14ddd67cacbf1ccecb8cc2d1f59a2c273866da72.
56 lines
1.5 KiB
JavaScript
56 lines
1.5 KiB
JavaScript
import { computed } from '@ember/object';
|
|
import { alias } from '@ember/object/computed';
|
|
import IdentityModel from './_base';
|
|
import DS from 'ember-data';
|
|
import apiPath from 'vault/utils/api-path';
|
|
import attachCapabilities from 'vault/lib/attach-capabilities';
|
|
|
|
const { attr, hasMany } = DS;
|
|
|
|
let Model = IdentityModel.extend({
|
|
formFields: computed(function() {
|
|
return ['name', 'disabled', 'policies', 'metadata'];
|
|
}),
|
|
name: attr('string'),
|
|
disabled: attr('boolean', {
|
|
defaultValue: false,
|
|
label: 'Disable entity',
|
|
helpText: 'All associated tokens cannot be used, but are not revoked.',
|
|
}),
|
|
mergedEntityIds: attr(),
|
|
metadata: attr({
|
|
editType: 'kv',
|
|
}),
|
|
policies: attr({
|
|
label: 'Policies',
|
|
editType: 'searchSelect',
|
|
fallbackComponent: 'string-list',
|
|
models: ['policy/acl', 'policy/rgp'],
|
|
}),
|
|
creationTime: attr('string', {
|
|
readOnly: true,
|
|
}),
|
|
lastUpdateTime: attr('string', {
|
|
readOnly: true,
|
|
}),
|
|
aliases: hasMany('identity/entity-alias', { async: false, readOnly: true }),
|
|
groupIds: attr({
|
|
readOnly: true,
|
|
}),
|
|
directGroupIds: attr({
|
|
readOnly: true,
|
|
}),
|
|
inheritedGroupIds: attr({
|
|
readOnly: true,
|
|
}),
|
|
canDelete: alias('updatePath.canDelete'),
|
|
canEdit: alias('updatePath.canUpdate'),
|
|
canRead: alias('updatePath.canRead'),
|
|
canAddAlias: alias('aliasPath.canCreate'),
|
|
});
|
|
|
|
export default attachCapabilities(Model, {
|
|
updatePath: apiPath`identity/${'identityType'}/id/${'id'}`,
|
|
aliasPath: apiPath`identity/entity-alias`,
|
|
});
|