Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PROD-2254: User must have delete scope to delete systems #5037

Merged
merged 5 commits into from
Jul 1, 2024

Conversation

eastandwestwind
Copy link
Contributor

@eastandwestwind eastandwestwind commented Jun 28, 2024

Closes https://ethyca.atlassian.net/browse/PROD-2254

Description Of Changes

Remove "OR" condition in the security of Delete Systems endpoint such that we only check for users with the "SYSTEM_DELETE" scope explicitly.

Code Changes

  • Restrict Delete systems API endpoint such that user must have "SYSTEM_DELETE" scope

Steps to Confirm

  • Log into Admin-UI with viewer scope
  • Confirm that you cannot delete systems

Pre-Merge Checklist

  • All CI Pipelines Succeeded
  • Documentation:
    • documentation complete, PR opened in fidesdocs
    • documentation issue created in fidesdocs
    • if there are any new client scopes created as part of the pull request, remember to update public-facing documentation that references our scope registry
  • Issue Requirements are Met
  • Relevant Follow-Up Issues Created
  • Update CHANGELOG.md
  • For API changes, the Postman collection has been updated
  • If there are any database migrations:
    • Ensure that your downrev is up to date with the latest revision on main
    • Ensure that your downgrade() migration is correct and works
      • If a downgrade migration is not possible for this change, please call this out in the PR description!

Copy link

vercel bot commented Jun 28, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Ignored Deployment
Name Status Preview Comments Updated (UTC)
fides-plus-nightly ⬜️ Ignored (Inspect) Visit Preview Jun 28, 2024 3:57pm

@eastandwestwind eastandwestwind requested a review from pattisdr June 28, 2024 15:12
eastandwestwind and others added 3 commits June 28, 2024 17:26
…ng the function that lets data stewards delete systems.

- Fides_key should be a string now
- Revert to using "verify_oauth_client_prod"
Copy link

cypress bot commented Jun 28, 2024

Passing run #8605 ↗︎

0 4 0 0 Flakiness 0
⚠️ You've recorded test results over your free plan limit.
Upgrade your plan to view test results.

Details:

Merge 9eb97d5 into 984bad7...
Project: fides Commit: 0e5bd25098 ℹ️
Status: Passed Duration: 00:33 💡
Started: Jun 28, 2024 4:07 PM Ended: Jun 28, 2024 4:08 PM

Review all test suite changes for PR #5037 ↗︎

Copy link

codecov bot commented Jun 28, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 86.54%. Comparing base (984bad7) to head (9eb97d5).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #5037   +/-   ##
=======================================
  Coverage   86.54%   86.54%           
=======================================
  Files         352      352           
  Lines       21882    21882           
  Branches     2885     2885           
=======================================
  Hits        18938    18938           
  Misses       2438     2438           
  Partials      506      506           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@eastandwestwind eastandwestwind merged commit 9ae5440 into main Jul 1, 2024
42 checks passed
@eastandwestwind eastandwestwind deleted the PROD-2254 branch July 1, 2024 13:46
Copy link

cypress bot commented Jul 1, 2024

Passing run #8626 ↗︎

0 4 0 0 Flakiness 0

Details:

PROD-2254: User must have delete scope to delete systems (#5037)
Project: fides Commit: 9ae54401cf
Status: Passed Duration: 00:34 💡
Started: Jul 1, 2024 1:57 PM Ended: Jul 1, 2024 1:57 PM

Review all test suite changes for PR #5037 ↗︎

Kelsey-Ethyca pushed a commit that referenced this pull request Jul 3, 2024
Co-authored-by: Dawn Pattison <pattisdr@users.noreply.github.com>
@cypress cypress bot mentioned this pull request Jul 3, 2024
31 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants