Code

2.6.2 Security features#1737

Code

Open

dlpzx wants to merge 42 commits intov2.6.2data-dot-all/dataall:v2.6.2from security-prs-2.6.2data-dot-all/dataall:security-prs-2.6.2Copy head branch name to clipboard

+9,435-13,590

Commits

Commits on Dec 5, 2024

• Updating overly permissive policies tagged by checkov for environment role using least privilege principles (#1632)

  Show description for 7053fdb
  

  2 peopleauthored and

  dlpzx

  committed
  7053fdb

• Update sanitization technique (#1692)

  Show description for c26963c
  

  noah-paige

  authored and

  dlpzx

  committed
  c26963c

• Fix/input validation (#1693)

  Show description for 5939060
  

  noah-paige

  authored and

  dlpzx

  committed
  5939060

• Move worksheet logic to service layer (#1696)

  Show description for 53a1205
  dlpzx

  committed
  53a1205

• **WITH FIXES** Separating Out Access Logging (#1695)

  Show description for 692d223
  

  noah-paige

  authored and

  dlpzx

  committed
  692d223

• return EnvironmentLogsBucketName from integraiton test getEnv query (#1697)

  Show description for 6206d98
  

  noah-paige

  authored and

  dlpzx

  committed
  6206d98

• add explicit token duration config for both JWTs (#1698)

  Show description for 375f441
  

  noah-paige

  authored and

  dlpzx

  committed
  375f441

• **INSERTED** migrate local server to FastAPI (#1577)

  Show description for d766bd4
  

  petrkalos

  authored and

  dlpzx

  committed
  d766bd4

• update fastapi dependency (#1699)

  Show description for 6913fe3
  

  noah-paige

  authored and

  dlpzx

  committed
  6913fe3

• **WITH FIXES** Upgrade "cross-spawn" to "7.0.5" (#1701)

  Show description for 75d0fd1
  dlpzx

  committed
  75d0fd1

• Add MANAGE_SHARES permissions (#1702)

  Show description for aedaa29
  dlpzx

  committed
  aedaa29

• Disable introspection on prod sizing (#1704)

  Show description for 5c71242
  

  noah-paige

  authored and

  dlpzx

  committed
  5c71242

• Add snyk workflow on schedule (#1705)

  Show description for 4933f1d
  

  noah-paige

  authored and

  dlpzx

  committed
  4933f1d

• Bump python runtime to bump cdk klayers cryptography version (#1707)

  Show description for a4cfc6c
  

  noah-paige

  authored and

  dlpzx

  committed
  a4cfc6c

• tenant-permission tests (#1694)

  Show description for b117eb8
  dlpzx

  committed
  b117eb8

• Fix Snyk Workflow to Find Project Deps (#1708)

  Show description for 01c63a4
  

  noah-paige

  authored and

  dlpzx

  committed
  01c63a4

• Added permission check - is tenant to update SSM parameters API (#1714)

  Show description for ebb91ff
  dlpzx

  committed
  ebb91ff

• Add GET_SHARE_OBJECT permissions to get data filters API (#1717)

  Show description for 7f0dab7
  dlpzx

  committed
  7f0dab7

• **WITH FIXES** Add permissions on list datasets for env group + cosmetic S3 Datasets (#1718)

  Show description for 1265669
  dlpzx

  committed
  1265669

• Add GET_WORKSHEET permission in RUN_SQL_QUERY (#1716)

  Show description for 385cd0d
  dlpzx

  committed
  385cd0d

• Unify Logger Config for Tasks (#1709)

  Show description for 6382d91
  

  noah-paige

  authored and

  dlpzx

  committed
  6382d91

• Change Snyk Actions (#1713)

  Show description for fce3455
  

  noah-paige

  authored and

  dlpzx

  committed
  fce3455

• Added permissions to Quicksight monitoring service layer (#1715)

  Show description for 095c208
  dlpzx

  committed
  095c208

• Add LIST_ENVIRONMENT_DATASETS permission for listing shared datasets and cleanup unused code (#1719)

  Show description for d318a7b
  dlpzx

  committed
  d318a7b

• Add omics create_run unauthorized test and improve other tests (#1723)

  Show description for 9d95e37
  dlpzx

  committed
  9d95e37

• Introduce is_owner permissions to Glossary mutations + add new integration tests (#1721)

  Show description for 6df8588
  dlpzx

  committed
  6df8588

• Refactor env permissions + modify getTrustAccount (#1712)

  Show description for 222c15c
  dlpzx

  committed
  222c15c

• Avoid infinite loop in glossaries checks (#1725)

  Show description for 5c2b167
  dlpzx

  committed
  5c2b167

• Feed consistent permissions (#1722)

  Show description for ab1f6e5
  dlpzx

  committed
  ab1f6e5

Commits on Dec 9, 2024

• Votes consistent permissions (#1724)

  Show description for ff9a8bd
  dlpzx

  committed
  ff9a8bd

• Consistent get_<DATA_ASSET> permissions - Dashboards (#1729)

  Show description for 283fadc
  dlpzx

  committed
  283fadc

• add resource permission checks (#1711)

  Show description for 6ee449b
  

  petrkalos

  authored and

  dlpzx

  committed
  6ee449b

Commits on Dec 10, 2024

• Consistent get_<DATA_ASSET> permissions - S3_Datasets (#1727)

  Show description for 5d8e33a
  dlpzx

  committed
  5d8e33a

Commits on Dec 26, 2024

• Integrational Tests fixes (#1744)

  Show description for f8597f6
  

  2 peopleauthored and

  dlpzx

  committed
  f8597f6

• Bump deps and fix snyk workflow (#1745)

  Show description for e9bf72d
  

  noah-paige

  authored and

  dlpzx

  committed
  e9bf72d

• CICD Integration tests: new shares for pre-existing datasets (#1611)

  Show description for 938ca42
  

  2 peopleauthored and

  dlpzx

  committed
  938ca42

• Feat/integ tests notifications (#1597)

  Show description for 1b195df
  

  3 peoplecommitted
  1b195df

• Fix global conftest shares after notifications PR (#1747)

  Show description for a692544
  

  noah-paige

  authored and

  dlpzx

  committed
  a692544

• Fix snyk (#1746)

  Show description for 0e36462
  

  noah-paige

  authored and

  dlpzx

  committed
  0e36462

• Sync integration tests with main

  dlpzx

  committed
  827bea8

• Fix functional permission tests - modify custom logic permissions tables

  dlpzx

  committed
  0aed0ec

• Upgrade werkzeug 3.0.3 -> 3.0.6

  dlpzx

  committed
  05b3377