D. Berge
386fd59900
Update API to handle permissions checks on most endpoints
2025-07-24 19:24:40 +02:00
D. Berge
e47020a21e
Add /user endpoints to API
2025-07-24 19:23:43 +02:00
D. Berge
b8f58ac67c
Add FIXME
2025-07-24 19:20:58 +02:00
D. Berge
b3e27ed1b9
Refactor auth.authentify.
...
We now get the user's details directly from the JWT token.
2025-07-24 19:15:36 +02:00
D. Berge
f5441d186f
Refactor auth.access middleware.
...
It users @dougal/user and @dougal/organisations classes.
2025-07-24 19:14:19 +02:00
D. Berge
d58bc4d62e
Remove unused code
2025-07-24 19:13:17 +02:00
D. Berge
01d1691def
Fix login endpoint (checkValidCredentials is now async)
2025-07-24 19:09:39 +02:00
D. Berge
bc444fc066
Add dependency to project organisations cache
2025-07-24 18:48:22 +02:00
D. Berge
989ec84852
Refactor JWT credentials check to use class User
2025-07-24 18:36:34 +02:00
D. Berge
065f6617af
Add class ServerUser derived from User.
...
Used on the backend. Adds methods to hash and check passwords and
to read from and save user data to the database.
2025-07-24 18:31:51 +02:00
D. Berge
825530c1fe
Use @dougal/user, @dougal/organisations modules in backend
2025-07-24 18:27:59 +02:00
D. Berge
1ef8eb871f
Add @dougal/user NodeJS module.
...
Abstracts the concept of User in the new permissions model.
2025-07-24 18:22:44 +02:00
D. Berge
2e9c603ab8
Add @dougal/organisations NodeJS module.
...
Abstracts the concept of Organisations in the new permissions model.
2025-07-24 18:21:02 +02:00
D. Berge
7f067ff760
Add contextual info about sailline CSV files.
...
The information that has to go on those and their layout is not
very obvious so adding a contextual help dialogue and an example
file puts the user on the right track.
Closes #319
2025-07-20 11:03:10 +02:00
D. Berge
487c297747
Add database upgrade file 37.
...
Fixes database upgrade file 35.
2025-07-19 12:20:55 +02:00
D. Berge
cfa771a830
Skip info for saillines with no preplot.
...
It may happen that the sailline info file has data for more lines
than are actually in the preplot (e.g., if importing a reduced
preplot file). In this case, we don't want a constraint violation
error due to missing corresponding lines in `preplot_lines` so we
check for that and only import lines that do exist in `preplot_lines`
2025-07-19 11:31:52 +02:00
D. Berge
3905e6f5d8
Update OpenAPI specification
2025-07-13 11:15:41 +02:00
D. Berge
2657c42dcc
Fix export statement
2025-07-13 11:13:31 +02:00
D. Berge
63e6af545a
Fix typo
2025-07-13 11:13:09 +02:00
D. Berge
d6fb7404b1
Adapt version.get middleware to new permissions approach
2025-07-13 00:07:52 +02:00
D. Berge
8188766a81
Refactor access to info table.
...
To adapt to new permissions system.
2025-07-13 00:07:05 +02:00
D. Berge
b7ae657137
Add auth.operations middleware.
...
Adds an array of allowed operations on given context to the request
under `req.user.operations`.
2025-07-13 00:02:48 +02:00
D. Berge
1295ec2ee3
Add function to return allowed operations in a given context
2025-07-13 00:01:15 +02:00
D. Berge
7c6d3fe5ee
Check permissions against vessel if not on a project endpoint
2025-07-12 16:49:10 +02:00
D. Berge
15570e0f3d
orgAccess(user, null, op) returns vessel access permissions.
...
If instead of a project ID, orgAccess receives `null`, it will
check permissions against the installation's own vessel rather
than against a specific project.
2025-07-12 16:47:39 +02:00
D. Berge
d551e67042
Add vesselOrganisations() function
2025-07-12 16:47:10 +02:00
D. Berge
6b216f7406
Add library function to retrieve vessel information.
...
In the `keystore` table, we now store information for our own
vessel (usually, where the Dougal server is installed). This
is an access function to retrieve that information.
The info stored for the vessel looks like this:
```yaml
type: vessel
key: ego
data:
imo: 9631890
mmsi: 257419000
name: Havila Charisma
contacts:
-
name: HC OM
phone: tel:+47123456789
email: hc.om@magseisfairfield.com
organisations:
Havila Charisma:
read: true
write: true
edit: true
```
2025-07-12 16:42:28 +02:00
D. Berge
a7e02c526b
Add function argument defaults.
...
This will cause the function to return a safe (false) value
rather than erroring.
2025-07-12 16:40:18 +02:00
D. Berge
55855d66e9
Remove dead code
2025-07-12 12:14:12 +02:00
D. Berge
ae79d90fef
Remove obsolete Vuex getters
2025-07-12 11:31:38 +02:00
D. Berge
c8b2047483
Refactor client-side access checks.
...
Go from a Vuex based to a mixin based approach.
2025-07-12 11:31:38 +02:00
D. Berge
d21cde20fc
Add mixin to check access rights client-side.
...
This replaces the Vuex getters approach (writeaccess, adminaccess)
which, as access rights are no longer global but dependent on each
project's settings, are no longer appropriate.
2025-07-12 11:31:38 +02:00
D. Berge
10580ea3ec
Create server-side organisations module
2025-07-12 11:31:38 +02:00
D. Berge
25f83d1eb3
Share access() function between front and back end.
...
This is so that any changes to the code are reflected on both sides.
2025-07-12 11:31:38 +02:00
D. Berge
dc294b5b50
Change prefix used for storing user preferences.
...
The `role` value no longer exists; we're replacing that with the
user ID.
2025-07-12 11:31:38 +02:00
D. Berge
b035d3481c
Ensure users have at least read access to most endpoints
2025-07-11 22:49:28 +02:00
D. Berge
ca4a14ffd9
Use new orgs based method for authorisation
2025-07-11 22:48:44 +02:00
D. Berge
d77f7f66db
Refresh organisations cache on project update
2025-07-11 22:48:06 +02:00
D. Berge
6b6f545b9f
Filter list of projects to only those readable by user
2025-07-11 22:47:32 +02:00
D. Berge
bdf62e2d8b
Show project orgs in projects list
2025-07-11 22:46:47 +02:00
D. Berge
1895168889
Show user orgs in avatar
2025-07-11 22:46:47 +02:00
D. Berge
8c875ea2f9
Return organisations as part of the projects listing
2025-07-11 22:46:47 +02:00
D. Berge
addbe2d572
Refactor user authentication code to use database
2025-07-11 22:46:47 +02:00
D. Berge
85f092b9e1
Upgrade minimum required database version
2025-07-11 22:46:47 +02:00
D. Berge
eb99d74e4a
Add database upgrade file 38.
...
Adds default user (superuser).
2025-07-11 22:46:47 +02:00
D. Berge
e65afdcaa1
Add database upgrade file 37.
...
Creates `keystore` table.
2025-07-11 22:46:47 +02:00
D. Berge
0b7e9e1d01
Add functions to check operation access via organisations
2025-07-11 22:46:47 +02:00
D. Berge
9ad17de4cb
Merge branch '76-add-configuration-gui' into 'devel'
...
Resolve "Add configuration GUI"
Closes #294 , #295 , #296 , #298 , #76 , #297 , #129 , #313 , #312 , #305 , #264 , #307 , #303 , #300 , #301 , #302 , #290 , #291 , #292 , and #293
See merge request wgp/dougal/software!17
2025-07-09 18:11:50 +00:00
D. Berge
071fd7438b
Reimplement <dougal-project-settings-online-line-name-format/>.
...
Closes #297 .
2025-07-09 16:45:35 +02:00
D. Berge
9cc21ba06a
Mark planned reshoots as such
2025-07-09 16:40:48 +02:00
