Commit Graph

728 Commits

Author SHA1 Message Date
Pedro Costa
4988032f87 prevent child account user from being restricted 2025-04-29 19:27:08 +01:00
Pedro Costa
a404bb1ef4 only restrictable roles get restricted peers views 2025-04-29 10:15:24 +01:00
Pedro Costa
8246dddb07 Merge branch 'fix/auditor-view-all-peers' into feature/user-info-with-role-permissions 2025-04-29 10:02:58 +01:00
Pedro Costa
a5318690a6 shift all peers logic to filter by user only if it does not have read permission 2025-04-29 10:02:44 +01:00
Pedro Costa
bf709eb698 Merge branch 'fix/auditor-view-all-peers' into feature/user-info-with-role-permissions 2025-04-29 09:37:33 +01:00
Pedro Costa
a5a8aa7131 [management] auditor allow view all peers 2025-04-29 09:37:04 +01:00
Pedro Costa
e82597d0ea Merge branch 'main' into feature/user-info-with-role-permissions 2025-04-29 08:43:24 +01:00
Bethuel Mmbaga
d8dc107bee [management] Skip IdP cache warm-up on Redis if data exists (#3733)
* Add Redis cache check to skip warm-up on startup if cache is already populated
* Refactor Redis test container setup for reusability
2025-04-28 15:10:40 +03:00
Pedro Maia Costa
47c3afe561 [management] add missing network admin mapping (#3751) 2025-04-28 11:05:27 +01:00
Pedro Costa
c08901a8fb Merge branch 'main' into feature/user-info-with-role-permissions 2025-04-25 15:44:41 +01:00
Pascal Fischer
38ada44a0e [management] allow impersonation via pats (#3739) 2025-04-25 16:40:54 +02:00
Pedro Maia Costa
dbf81a145e [management] network admin role (#3720) 2025-04-25 15:14:32 +01:00
Pedro Maia Costa
39483f8ca8 [management] Auditor role (#3721) 2025-04-25 15:04:25 +01:00
Pedro Costa
32463ac604 Merge branch 'main' into feature/user-info-with-role-permissions 2025-04-24 19:03:51 +01:00
Viktor Liu
4a9049566a [client] Set up firewall rules for dns routes dynamically based on dns response (#3702) 2025-04-24 17:37:28 +02:00
Pedro Costa
67f7d7e870 Merge branch 'main' into feature/user-info-with-role-permissions
# Conflicts:
#	management/server/mock_server/account_mock.go
2025-04-24 08:47:28 +01:00
Viktor Liu
400b9fca32 [management] Add firewall rule route ID and missing route domains (#3700) 2025-04-23 21:29:46 +02:00
Pascal Fischer
312bfd9bd7 [management] support custom domains per account (#3726) 2025-04-23 19:36:53 +02:00
Misha Bragin
c69df13515 [management] Add account meta (#3724) 2025-04-23 18:44:22 +02:00
Pedro Costa
546e2cc0c3 Merge branch 'feature/additional-roles' into feature/user-info-with-role-permissions 2025-04-23 15:13:26 +01:00
Pascal Fischer
986eb8c1e0 [management] fix lastLogin on dashboard (#3725) 2025-04-23 15:54:49 +02:00
Pedro Costa
e32e74ed5d Merge branch 'feature/additional-roles' into feature/user-info-with-role-permissions 2025-04-22 09:01:06 +01:00
Pascal Fischer
1a6d6b3109 [management] fix github run id (#3705) 2025-04-18 11:21:54 +02:00
Pascal Fischer
a4311f574d [management] push benchmark results to grafana (#3701) 2025-04-17 21:01:23 +02:00
Pedro Costa
808b7703aa better method name 2025-04-17 19:25:09 +01:00
Pedro Costa
d9ad20fd0e get role permissions for all modules 2025-04-17 18:55:44 +01:00
Pedro Costa
82ab78d176 make user permissions optional 2025-04-17 15:32:44 +01:00
Pedro Costa
ab391ed9fa [management] restrict dashboard only to restrictable roles 2025-04-16 19:34:20 +01:00
Pedro Costa
974f297022 Merge branch 'feature/additional-roles' into feature/user-info-with-role-permissions 2025-04-16 17:03:15 +01:00
Pascal Fischer
e0b33d325d [management] permissions manager use crud operations (#3690) 2025-04-16 17:25:03 +02:00
Pedro Costa
467b0f94b1 better naming of exposed user permissions 2025-04-16 11:48:10 +01:00
Pedro Costa
5e989dff4f [management] user info with role permissions 2025-04-15 22:26:41 +01:00
Pedro Maia Costa
75bdd47dfb [management] get current user endpoint (#3666) 2025-04-15 11:06:07 +01:00
Pedro Maia Costa
4134b857b4 [management] add permissions manager to geolocation handler (#3665) 2025-04-14 17:57:58 +01:00
Vlad
7839d2c169 [management] Refactor/management/updchannel (#3645)
* refactoring updatechannel - use read mutex for send update
2025-04-11 18:22:59 +03:00
Pascal Fischer
b9f82e2f8a [management] Buffer updateAccountPeers calls (#3644) 2025-04-11 17:21:05 +02:00
Pedro Maia Costa
fd2a21c65d [management] remove unnecessary access control middleware (#3650) 2025-04-11 10:43:59 +01:00
Maycon Santos
82d982b0ab [management,client] Add support to configurable prompt login (#3660) 2025-04-11 11:34:55 +02:00
Pascal Fischer
5ea2806663 [management] use permission modules (#3622) 2025-04-10 11:06:52 +02:00
Viktor Liu
09243a0fe0 [management] Remove remaining backend linux router limitation (#3589) 2025-04-01 21:29:57 +02:00
Pedro Maia Costa
cbec7bda80 [management] permission manager validate account access (#3444) 2025-03-30 17:08:22 +02:00
Maycon Santos
50f5cc48cd [management] Fix extended config when nil (#3593)
* Fix extended config when nil

* update integrations
2025-03-27 23:07:10 +01:00
Maycon Santos
a4f04f5570 [management] fix extend call and move config to types (#3575)
This PR fixes configuration inconsistencies and updates the store engine type usage throughout the management code. Key changes include:
- Replacing outdated server.Config references with types.Config and updating related flag variables (e.g. types.MgmtConfigPath).
- Converting engine constants (SqliteStoreEngine, PostgresStoreEngine, MysqlStoreEngine) to use types.Engine for consistent type–safety.
- Adjusting various test and migration code paths to correctly reference the new configuration and engine types.
2025-03-27 13:04:50 +01:00
Bethuel Mmbaga
34d86c5ab8 [management] Sync account peers on network router group changes (#3573)
- Updates account peers when a group linked to a network router is modified
- Prevents group deletion if it's still being used by any network router
2025-03-27 12:19:22 +01:00
Maycon Santos
9cbcf7531f [management] Fix invalid port range sync (#3571)
We should not send port range when a port is set or when protocol is all or icmp
2025-03-24 00:56:51 +01:00
Maycon Santos
bd8f0c1ef3 [client] add profiling dumps to debug package (#3517)
enhances debugging capabilities by adding support for goroutine, mutex, and block profiling while updating state dump tracking and refining test and release settings.

- Adds pprof-based profiling for goroutine, mutex, and block profiles in the debug bundle.
- Updates state dump functionality by incorporating new status and key fields.
- Adjusts test validations and default flag/retention settings.
2025-03-23 13:46:09 +01:00
Pascal Fischer
f081435a56 [management] add log when using redis cache (#3562) 2025-03-21 18:16:27 +01:00
Pascal Fischer
b62a1b56ce [docs] rename network traffic logging to traffic events (#3556) 2025-03-21 16:32:47 +01:00
Pascal Fischer
8d7c92c661 [management] add receive timestamp to traffic event (#3559) 2025-03-21 16:31:23 +01:00
Pascal Fischer
8f0aa8352a [docs] add examples to events and tag to ingress port (#3552) 2025-03-20 18:26:08 +01:00