upstream/upstream-corteza
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

snapshot of https://github.com/cortezaproject/corteza.git (2024.9.x, 2026-09-18; blobs > 131072B omitted)
Some checks failed
SonarQube / SonarQube (push) Failing after 5m28s
Details
E2e test on main branch push / server and client test (map[name:admin port:8080]) (push) Failing after 3m33s
Details
Server and lib tests / Library test (js) (push) Failing after 1m36s
Details
Server and lib tests / Library test (vue) (push) Successful in 2m24s
Details
Server and lib tests / Web client test (admin) (push) Successful in 2m52s
Details
Server and lib tests / Web client test (compose) (push) Successful in 3m23s
Details
Server and lib tests / Web client test (discovery) (push) Successful in 2m49s
Details
Server and lib tests / Web client test (one) (push) Successful in 2m52s
Details
Server and lib tests / Web client test (privacy) (push) Successful in 2m44s
Details
Server and lib tests / Web client test (reporter) (push) Successful in 2m56s
Details
Server and lib tests / Web client test (workflow) (push) Successful in 3m0s
Details
Server and lib tests / Server tests (push) Failing after 4m55s
Details
E2e test on main branch push / notify-failure (push) Failing after 9s
Details
Server and lib tests / Send matrix testing notification (push) Successful in 2s
Details
Mark stale issues and pull requests / stale (push) Successful in 40s
Details

Browse Source
This commit is contained in:
upstream-mirror
2026-09-18 01:22:23 +05:00
commit 7e385fc126
8391 changed files with 1766236 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

148
server/provision/000_base/compose_access_control.yaml Normal file
View File

@@ -0,0 +1,148 @@
allow:
authenticated:
corteza::compose/:
- namespaces.search
corteza::compose:namespace/*:
- read
- export
- modules.export
- charts.export
- pages.export
- pages.search
- modules.search
- charts.search
corteza::compose:module/*/*:
- read
- export
- records.search
corteza::compose:module-field/*/*/*:
- record.value.read
corteza::compose:page/*/*:
- read
- export
corteza::compose:page-layout/*/*/*:
- read
corteza::compose:chart/*/*:
- read
- export
corteza::compose:record/*/*/*:
- read
admin:
corteza::compose/:
- grant
- settings.read
- settings.manage
- namespace.create
- namespaces.search
corteza::compose:namespace/*:
- read
- update
- delete
- manage
- export
- modules.export
- charts.export
- pages.export
- page.create
- pages.search
- module.create
- modules.search
- chart.create
- charts.search
corteza::compose:module/*/*:
- read
- update
- delete
- export
- record.create
- records.search
corteza::compose:module-field/*/*/*:
- record.value.read
- record.value.update
corteza::compose:record/*/*/*:
- read
- update
- delete
- revisions.search
corteza::compose:chart/*/*:
- read
- update
- delete
- export
corteza::compose:page/*/*:
- read
- update
- delete
- export
corteza::compose:page-layout/*/*/*:
- read
- update
- delete
low-code-admin:
corteza::compose/:
- grant
- settings.read
- settings.manage
- namespace.create
- namespaces.search
corteza::compose:namespace/*:
- read
- update
- delete
- manage
- export
- modules.export
- charts.export
- pages.export
- page.create
- pages.search
- module.create
- modules.search
- chart.create
- charts.search
corteza::compose:module/*/*:
- read
- update
- delete
- export
- record.create
- records.search
corteza::compose:module-field/*/*/*:
- record.value.read
- record.value.update
corteza::compose:record/*/*/*:
- read
- update
- delete
corteza::compose:chart/*/*:
- read
- update
- delete
- export
corteza::compose:page/*/*:
- read
- update
- delete
- export

72
server/provision/000_base/roles.yaml Normal file
View File

@@ -0,0 +1,72 @@
roles:
# bypass and other system roles are
# programmatically (re)created on server start
admin:
name: Administrator
security-admin:
name: Security administrator
low-code-admin:
name: Namespace administrator
owner:
name: Owner
meta:
description: |-
Automatically assigned to resource owner
Applicable to compose records, auth clients and workflows
context:
expr: resource.ownedBy == userID
resourceType:
- corteza::compose:record
- corteza::system:authClient
- corteza::automation:workflow
creator:
name: Creator
meta:
description: |-
Automatically assigned to user created the resource.
Applicable on records, auth clients and workflows
context:
expr: resource.createdBy == userID
resourceType:
- corteza::compose:record
- corteza::system:authClient
- corteza::automation:workflow
updater:
name: Updater
meta:
description: |-
Automatically assigned to user that was the last to update the resource.
Applicable to compose records, auth clients and workflows
context:
expr: resource.updatedBy == userID
resourceType:
- corteza::compose:record
- corteza::system:authClient
- corteza::automation:workflow
deleter:
name: Deleter
meta:
description: |-
Automatically assigned to user that was the last to update the resource.
Applicable to compose records, auth clients and workflows
context:
expr: resource.deletedBy == userID
resourceType:
- corteza::compose:record
- corteza::system:authClient
- corteza::automation:workflow
data-privacy-officer:
name: Data Privacy Officer
meta:
description: |-
Users that are allowed to view and manage privacy requests.

172
server/provision/000_base/system_access_control.yaml Normal file
View File

@@ -0,0 +1,172 @@
allow:
authenticated:
corteza::system/:
- applications.search
- auth-clients.search
- users.search
- roles.search
corteza::system:user/*:
- read
- email.unmask
- name.unmask
corteza::system:application/*:
- read
- application.flag.self
corteza::system:role/*:
- read
corteza::system:auth-client/*:
- authorize
admin:
corteza::system/:
- grant
- action-log.read
- settings.read
- settings.manage
- application.create
- applications.search
- auth-client.create
- auth-clients.search
- user.create
- users.search
- template.create
- templates.search
- role.create
- roles.search
- reminder.assign
- queue.create
- queues.search
- application.flag.global
- apigw-route.create
- apigw-routes.search
- report.create
- reports.search
corteza::system:auth-client/*:
- read
- update
- delete
- authorize
corteza::system:application/*:
- read
- update
- delete
corteza::system:user/*:
- read
- update
- suspend
- unsuspend
- delete
- email.unmask
- name.unmask
corteza::system:role/*:
- read
- update
- delete
- members.manage
corteza::system:template/*:
- read
- update
- delete
- render
corteza::system:queue/*:
- read
- update
- delete
- queue.read
- queue.write
corteza::system:apigw-route/*:
- read
- update
- delete
corteza::system:report/*:
- read
- update
- delete
- run
security-admin:
corteza::compose/:
- grant
- action-log.read
- settings.read
- settings.manage
corteza::automation/:
- grant
- settings.read
- settings.manage
corteza::federation/:
- grant
- settings.read
- settings.manage
corteza::system/:
- grant
- settings.read
- settings.manage
- application.create
- applications.search
- auth-client.create
- auth-clients.search
- user.create
- users.search
- template.create
- templates.search
- role.create
- roles.search
- reminder.assign
- queue.create
- queues.search
- report.create
- reports.search
corteza::system:auth-client/*:
- read
- update
- delete
- authorize
corteza::system:application/*:
- read
- update
- delete
corteza::system:user/*:
- read
- update
- suspend
- unsuspend
- delete
corteza::system:role/*:
- read
- update
- delete
- members.manage
corteza::system:report/*:
- read
- update
- delete
- run
data-privacy-officer:
corteza::system:data-privacy-request/*:
- read
- approve
corteza::system/:
- data-privacy-requests.search