krb5-wallet.git/perl/lib/Wallet/ACL.pm, branch upstream/1.3

Standardize Perl module versions

2016-01-17T20:25:15+00:00

The versions of all of the wallet Perl modules now match the overall package version except for Wallet::Schema, which is used to version the database schema. Import the test from rra-c-util 5.10 and exclude Wallet::Schema from the tests. Go through all Perl modules and standardize the syntax for setting the version and indicating the required version of Perl. Fix a few other syntax issues while I'm in there.

Pass object type and name to external ACL verifiers

2016-01-16T23:35:49+00:00

This requires changing the ACL verifier plumbing to pass object type and name all the way through when verifying ACLs. Hopefully I caught everything.

Better error reporting on verifier failure during add

2015-12-15T06:38:46+00:00

When adding a new ACL, if creation of the verifier failed, we reported a pretty minimal error message claiming that the identifier was the problem. It can't possibly be the problem when the constructor fails. Report the actual failure more directly.

ACL.pm: Destroying a nested ACL will now fail

2015-11-19T07:47:26+00:00

When destroying an ACL nested in other ACLs, we now fail with an explanation rather than going through to remove all the places it's nested. That's more in line with how we handle trying to destroy ACLs that own things. Change-Id: I8bc0530e37c54369ec52d9b369f8fabe98def77a

Added nested acl verifier

2015-06-08T22:24:34+00:00

This verifier will allow embedding one ACL in another for more flexible ACL handling. As part of thise we've also added the ability for each verifier to do a syntax check to see if a given name is valid for that verifier. For the moment this returns true for everything but Nested. Nested will check to make sure the given name is an existing group. Change-Id: Iacdf146d46ed882d57b7534058d34db6e6ec1de4

ACL.pm: Error messages use name rather than ID

2015-06-08T22:24:34+00:00

All error messages should now use the ACL name rather than the ADL id, for readability. Change-Id: I2d1cfe806b459ef083293df4fa0b83cb4cef673b

ACL.pm: Fixed capitalization of ACL in pod

2015-06-08T22:24:34+00:00

Change-Id: I9e4632f3ff81f916f9157ef8128b20915ecded08

Added acl replace command to wallet backend

2015-06-08T22:24:34+00:00

New command for replacing the ownership of anything owned by a specific ACL with another ACL. This differs from acl rename in that it's to be used when the destination ACL already exists and potentially already owns some objects. Change-Id: I765bebf499fe0f861abc2ffe1873990590beed36

Use DateTime objects uniformly, improve expires parsing

2014-07-16T04:10:57+00:00

Always use DateTime objects for every date field in the database, and translate them into the local time zone for display when pulling them out of the database. This should provide better portability to different database backends. Change the parsing of expires arguments to use Date::Parse, thus supporting a much broader variety of possible date and time formats and allowing easy conversion to a DateTime object. Document the new dependency. Change-Id: I2ee8eaa6aa6ae9925ac419e49234ec9880d4fe95 Reviewed-on: https://gerrit.stanford.edu/1555 Reviewed-by: Russ Allbery Tested-by: Russ Allbery

Record ACL names in the ACL history

2014-07-16T04:10:47+00:00

Change-Id: I0d7a088bb34dda2fc554b9f104c2a33e5faf879e Reviewed-on: https://gerrit.stanford.edu/1554 Reviewed-by: Russ Allbery Tested-by: Russ Allbery