5c2a08de6d
* Update browserslist * Add browserslistrc * ember-cli-update --to 3.26, fix conflicts * Run codemodes that start with ember-* * More codemods - before cp* * More codemods (curly data-test-*) * WIP ember-basic-dropdown template errors * updates ember-basic-dropdown and related deps to fix build issues * updates basic dropdown instances to new version API * updates more deps -- ember-template-lint is working again * runs no-implicit-this codemod * creates and runs no-quoteless-attributes codemod * runs angle brackets codemod * updates lint:hbs globs to only touch hbs files * removes yield only templates * creates and runs deprecated args transform * supresses lint error for invokeAction on LinkTo component * resolves remaining ambiguous path lint errors * resolves simple-unless lint errors * adds warnings for deprecated tagName arg on LinkTo components * adds warnings for remaining curly component invocation * updates global template lint rules * resolves remaining template lint errors * disables some ember specfic lint rules that target pre octane patterns * js lint fix run * resolves remaining js lint errors * fixes test run * adds npm-run-all dep * fixes test attribute issues * fixes console acceptance tests * fixes tests * adds yield only wizard/tutorial-active template * fixes more tests * attempts to fix more flaky tests * removes commented out settled in transit test * updates deprecations workflow and adds initializer to filter by version * updates flaky policies acl old test * updates to flaky transit test * bumps ember deps down to LTS version * runs linters after main merge * fixes client count tests after bad merge conflict fixes * fixes client count history test * more updates to lint config * another round of hbs lint fixes after extending stylistic rule * updates lint-staged commands * removes indent eslint rule since it seems to break things * fixes bad attribute in transform-edit-form template * test fixes * fixes enterprise tests * adds changelog * removes deprecated ember-concurrency-test-waiters dep and adds @ember/test-waiters * flaky test fix Co-authored-by: hashishaw <cshaw@hashicorp.com>
54 lines
1.6 KiB
JavaScript
54 lines
1.6 KiB
JavaScript
// This model represents the capabilities on a given `path`
|
|
// `path` is also the primaryId
|
|
// https://www.vaultproject.io/docs/concepts/policies.html#capabilities
|
|
|
|
import Model, { attr } from '@ember-data/model';
|
|
|
|
import { computed } from '@ember/object';
|
|
|
|
const SUDO_PATHS = [
|
|
'sys/seal',
|
|
'sys/replication/performance/primary/secondary-token',
|
|
'sys/replication/dr/primary/secondary-token',
|
|
'sys/replication/reindex',
|
|
'sys/leases/lookup/',
|
|
];
|
|
|
|
const SUDO_PATH_PREFIXES = ['sys/leases/revoke-prefix', 'sys/leases/revoke-force'];
|
|
|
|
export { SUDO_PATHS, SUDO_PATH_PREFIXES };
|
|
|
|
const computedCapability = function (capability) {
|
|
return computed('path', 'capabilities', 'capabilities.[]', function () {
|
|
const capabilities = this.capabilities;
|
|
const path = this.path;
|
|
if (!capabilities) {
|
|
return false;
|
|
}
|
|
if (capabilities.includes('root')) {
|
|
return true;
|
|
}
|
|
if (capabilities.includes('deny')) {
|
|
return false;
|
|
}
|
|
// if the path is sudo protected, they'll need sudo + the appropriate capability
|
|
if (SUDO_PATHS.includes(path) || SUDO_PATH_PREFIXES.find((item) => path.startsWith(item))) {
|
|
return capabilities.includes('sudo') && capabilities.includes(capability);
|
|
}
|
|
return capabilities.includes(capability);
|
|
});
|
|
};
|
|
|
|
export default Model.extend({
|
|
path: attr('string'),
|
|
capabilities: attr('array'),
|
|
canSudo: computedCapability('sudo'),
|
|
canRead: computedCapability('read'),
|
|
canCreate: computedCapability('create'),
|
|
canUpdate: computedCapability('update'),
|
|
canDelete: computedCapability('delete'),
|
|
canList: computedCapability('list'),
|
|
allowedParameters: attr(),
|
|
deniedParameters: attr(),
|
|
});
|