Skip to content
Snippets Groups Projects
  1. Jun 17, 2021
  2. Apr 07, 2021
    • Frank Duncan's avatar
    • Karl Fogel's avatar
      Improve code comment about group mapping · 44affd0a
      Karl Fogel authored
      (See https://chat.opentechstrategies.com/#narrow/stream/\
      45-Lever-for.20Change/topic/API/near/97885 for context.)
      44affd0a
    • Frank Duncan's avatar
      Update permissions to bring more in line with OTS standard · aff1abc3
      Frank Duncan authored
      Mainly the addition of LFC Admins and LFC Pseudo Decision Makers.
      aff1abc3
    • Karl Fogel's avatar
      Make a comment more accurate · cf1d3778
      Karl Fogel authored
      cf1d3778
    • Frank Duncan's avatar
      Add API users to default permissions set · 940093fc
      Frank Duncan authored
      A part of the ansible refactor, the permissions for users needs to be
      more fleshed out.  This adds specific groups for the api partners.
      940093fc
    • Frank Duncan's avatar
      Two small fixes for edit interface · da074d43
      Frank Duncan authored
      1) enable for sysops, and 2) hide the mediawiki [Edit] section links
      when the proposal has edit enabled.
      da074d43
    • Frank Duncan's avatar
      Use the new refactored ansible with 100Change2020 · 744f277f
      Frank Duncan authored
      With the ansible configuration centralized into a top level torque-sites
      directory (roles), the majority of the tasks main.yml and supporting
      files can be removed with the roles being added to the top level
      playbook.
      
      This required a change to the base roles:
      
      * Add rss as a base role for the RSS extension
      * Add api roles to ase permissions
      * Fill out some roles (like psuedo board member)
      * Add board members to okta groups we knwo about
      * Add login override
      * Respect local login flag when rebuilding the login page
      744f277f
    • Frank Duncan's avatar
      Use the new refactored ansible with DemoView · 55fb0c92
      Frank Duncan authored
      With the ansible configuration centralized into a top level torque-sites
      directory (roles), the majority of the tasks main.yml and supporting
      files can be removed with the roles being added to the top level
      playbook.
      
      This required a change to the base roles:
      * Board Members from Okta are Decision Makers
      55fb0c92
    • Frank Duncan's avatar
      Use the new refactored ansible with 100Change2017 · 5e9e5a0c
      Frank Duncan authored
      With the ansible configuration centralized into a top level torque-sites
      directory (roles), the majority of the tasks main.yml and supporting
      files can be removed with the roles being added to the top level
      playbook.
      
      This required a few changes to the base pipeline:
      * Add composer to mediawiki install
      * Composer version update
      * Add postgres base package
      * Add LFC Evaluators as a known SAML group
      * Add pre-req installation for mediawiki
      
      Then removing all the old stuff from 100Change2017 and updating
      the yml file to reference the general stuff.
      5e9e5a0c
    • Frank Duncan's avatar
      Fix #62, Fix #64: Refactor permissions file · 34e80ce0
      Frank Duncan authored
      Clean it up so things are a bit more declarative, as well as moving the
      simpelsaml group config code over to the permissions, so that the
      separation of concerns is a bit more straightforward.
      
      Issue #62: Create security model for torque-sites
      Issue #64: Pluralize the names of the abstract user groups
      34e80ce0
    • Frank Duncan's avatar
      Fix #59: Refactor roles from inline blocks to files · 3b10dea3
      Frank Duncan authored
      A lot of the configuration was inline blocks that were dumped directly
      into LocalSettings.php.  This change separates those configurations out
      into their own files for easier maintenance and documentation.
      
      Issue #59: Change MediaWiki configurations to have multiple files
      3b10dea3
Loading