Jeff Mitchell f3ef23318d Create more granular ACL capabilities. ...

This commit splits ACL policies into more fine-grained capabilities.
This both drastically simplifies the checking code and makes it possible
to support needed workflows that are not possible with the previous
method. It is backwards compatible; policies containing a "policy"
string are simply converted to a set of capabilities matching previous
behavior.

Fixes #724 (and others).

2016-01-08 13:05:14 -05:00

..

handler_test.go

Use cleanhttp instead of bare http.Client

2015-10-22 14:37:12 -04:00

handler.go

Have 'sys/renew' return the value provided in Secret.

2016-01-07 11:35:09 -05:00

help_test.go

Remove cookie authentication.

2015-08-21 19:46:23 -07:00

help.go

Adding error and remote_address to audit log lines

2015-06-18 17:17:18 -07:00

http_test.go

Use cleanhttp instead of bare http.Client

2015-10-22 14:37:12 -04:00

logical_test.go

Fix StandbyRedirect test

2015-12-17 13:58:16 -05:00

logical.go

Create more granular ACL capabilities.

2016-01-08 13:05:14 -05:00

server.go

http: start the API server

2015-03-11 23:05:16 -07:00

sys_audit_test.go

Reintroduce the ability to look up obfuscated values in the audit log

2015-11-18 20:26:03 -05:00

sys_auth_test.go

Remove cookie authentication.

2015-08-21 19:46:23 -07:00

sys_health_test.go

http: adding sys/health endpoint

2015-04-23 11:53:31 -07:00

sys_health.go

http: support ?standbyok for 200 status on standby. Fixes #389

2015-07-02 17:49:35 -07:00

sys_init_test.go

Remove cookie authentication.

2015-08-21 19:46:23 -07:00

sys_init.go

Address comments from review.

2015-08-25 15:33:58 -07:00

sys_leader_test.go

http: Adding sys/leader endpoint

2015-04-20 11:59:24 -07:00

sys_leader.go

http: Adding sys/leader endpoint

2015-04-20 11:59:24 -07:00

sys_lease_test.go

Remove cookie authentication.

2015-08-21 19:46:23 -07:00

sys_mount_test.go

Switch per-mount values to strings going in and seconds coming out, like other commands. Indicate deprecation of 'lease' in the token backend.

2015-09-25 10:41:21 -04:00

sys_policy_test.go

Create a "default" policy with sensible rules.

2015-11-09 15:44:09 -05:00

sys_policy.go

WriteOperation -> UpdateOperation

2016-01-08 13:03:03 -05:00

sys_rekey_test.go

Add rekey nonce/backup.

2016-01-06 09:54:35 -05:00

sys_rekey.go

Add rekey nonce/backup.

2016-01-06 09:54:35 -05:00

sys_rotate_test.go

Remove cookie authentication.

2015-08-21 19:46:23 -07:00

sys_seal_test.go

Create more granular ACL capabilities.

2016-01-08 13:05:14 -05:00

sys_seal.go

Add reset support to the unseal command.

2015-10-28 15:59:39 -04:00

testing.go

Remove cookie authentication.

2015-08-21 19:46:23 -07:00