Conditional access based on project membership feature

[Freddy Vega]

We have developed and implemented a feature for RHQ that allows us to limit access to projects based on user credentials. Does anyone have a need for this feature? Let me know and if enough folks are interested we'll submit a pull request upstream. This feature has been heavily tested by us here at Wolters Kluwer Health.

Thanks!

[Mazen Bilbiesi]

I am here need to implement this feature.

Regards,

Mazen 

[JORGE CORDOVA]

We really this new feature too.  We are in the process of moving our new Linux RedwooodHQ server to be used by multiple users across multiple teams and we need to hide projects based on user role.

Please share your project or ideas.

Thanks
Jorge

[Freddy Vega]

Here is the link for the conditional access pull request:

https://github.com/dmolchanenko/RedwoodHQ/pull/8

After you merge this into your RHQ installation only the Admin user will be able to access the Settings tab and you'll have to go into each user setting (as admin) and assign them to the projects they will have access to.

Let me know if any questions and I'll be happy to answer.

[JORGE CORDOVA]

AWESOME!!!

I am going to try it this weekend as well on my unofficial version of RedwoodHQ Linux server running on a latest Fedora workstation if that work otherwise I will try it on current Windows server

Thanks
Jorge

On Thursday, September 8, 2016 at 3:51:57 PM UTC-6, Freddy Vega wrote:

Here is the link for the conditional access pull request:

https://github.com/dmolchanenko/RedwoodHQ/pull/8 - private

[JORGE CORDOVA]

I have not being able to successfully see this to work on our try Windows server env.  I replaced all the required JS scripts, stop/start the server but I am no longer able to log into the app,

Any suggestions how troubleshoot or fix or if I am missing something else in order to try it successfully?

Thanks
Jorge

On Friday, September 9, 2016 at 1:26:02 PM UTC-6, JORGE CORDOVA wrote:

AWESOME!!!

I am going to try it this weekend as well on my unofficial version of RedwoodHQ Linux server running on a latest Fedora workstation if that work otherwise I will try it on current Windows server

Thanks
Jorge

On Thursday, September 8, 2016 at 3:51:57 PM UTC-6, Freddy Vega wrote:

Here is the link for the conditional access pull request:

https://github.com/dmolchanenko/RedwoodHQ/pull/8 - private - private - private

[Freddy Vega]

Can you list the files you replaced?

[JORGE CORDOVA]

Actually, I did something wrong since I tried again deleting and putting back the old files and then copied them back and renaming the old files and guess what ... IT IS AMAZING!!! It is working out of the box.  Great Job man!!!

I tested both new features and I see users just seeing proper assigned Projects and also ran REST API execution via a Firefox REST API Client and via Postman.

Tomorrow, I am planning on setting them up on our real RedwoodHQ QA environments and try them with our current internal REST API projects which run via Bamboo CI.  Our tests are executed in the AWS cloud since our end App run in the cloud.

Thanks for all your great feedback and keep the great work man!

Good night!
Jorge

On Thursday, September 15, 2016 at 8:32:04 AM UTC-6, Freddy Vega wrote:

Can you list the files you replaced?

On Thursday, September 15, 2016 at 12:34:22 AM UTC-4, JORGE CORDOVA wrote:

I have not being able to successfully see this to work on our try Windows server env.  I replaced all the required JS scripts, stop/start the server but I am no longer able to log into the app,

Any suggestions how troubleshoot or fix or if I am missing something else in order to try it successfully?

Thanks
Jorge

On Friday, September 9, 2016 at 1:26:02 PM UTC-6, JORGE CORDOVA wrote:

AWESOME!!!

I am going to try it this weekend as well on my unofficial version of RedwoodHQ Linux server running on a latest Fedora workstation if that work otherwise I will try it on current Windows server

Thanks
Jorge

On Thursday, September 8, 2016 at 3:51:57 PM UTC-6, Freddy Vega wrote:

Here is the link for the conditional access pull request:

https://github.com/dmolchanenko/RedwoodHQ/pull/8 - private - private - private - private - private - private - private

[siriu...@gmail.com]

On Thursday, September 1, 2016 at 3:06:59 AM UTC+5:30, Freddy Vega wrote:
> We have developed and implemented a feature for RHQ that allows us to limit access to projects based on user credentials. Does anyone have a need for this feature? Let me know and if enough folks are interested we'll submit a pull request upstream. This feature has been heavily tested by us here at Wolters Kluwer Health.
>
> Thanks!

We have RedwoodHQ files in our Local machine, No Git Integration yet.
Which files do I need to change?

m - public\model\Users.js
m - public\view\UserEdit.js
m - public\app.js
m - routes\auth.js
m - routes\projects.js
m - routes\users.js

only the above? or more?

[siriu...@gmail.com]

and how does it actually work? Users are not able to access pojects that they are not provided access to?

[siriu...@gmail.com]

Because after we made the change, Users that are not assigned certain projects are still able to see them

[siriu...@gmail.com]

The Setting tab has disappeared for everyone except admin. But Users able to access project even when not given access

[siriu...@gmail.com]

Is having latest version of RedwoodHQ necessary?

[Freddy Vega]

Those files look right, if they are from the readme.

Users will have access to everything until you place them in projects. Use the Settings > Users ui. For each user give them access to one or more projects.

I don't know what will happen if you use 2.5 because this change is based on 2.4 version and we haven't done an analysis yet to see what it will take to migrate our code base to 2.5

I hope I've answered all of your questions.

--
You received this message because you are subscribed to a topic in the Google Groups "PrimaTest Automation" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/primatest-automation/59cB7rlvZ5Y/unsubscribe.
To unsubscribe from this group and all its topics, send an email to primatest-automation+unsub...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Freddy Vega

My Blog:
http://blog.teamvgp.com

Join me on LinkedIn:
http://www.linkedin.com/in/freddyvega

GitHub:

http://github.com/freddyvega

Twitter:

@freddyvega

[siriu...@gmail.com]

> To unsubscribe from this group and all its topics, send an email to primatest-automa...@googlegroups.com.

>
> For more options, visit https://groups.google.com/d/optout.
>
>
>
>
>
> --
>
>
>
> Freddy Vega
>
> My Blog:
> http://blog.teamvgp.com
>
> Join me on LinkedIn:
> http://www.linkedin.com/in/freddyvega
>
>
>
> GitHub:
> http://github.com/freddyvega
>
>
>
> Twitter:
>
>
> @freddyvega

I did the changes in 2.50.40 version.
I did exactly as the steps you mentioned, using admin user I gave one of the users access to only one project but that user still can access other projects.
Maybe its a version thing.

[Freddy Vega]

One of the main features of 2.5 RHQ is that it uses the newer Mongo version. 2.4 is on an older version. Maybe this is why its not working for you?

> To unsubscribe from this group and all its topics, send an email to primatest-automation+unsub...@googlegroups.com.

[deymo...@gmail.com]

> > To unsubscribe from this group and all its topics, send an email to primatest-automa...@googlegroups.com.

> >
> > For more options, visit https://groups.google.com/d/optout.
> >
> >
> >
> >
> >
> > --
> >
> >
> >
> > Freddy Vega
> >
> > My Blog:
> > http://blog.teamvgp.com
> >
> > Join me on LinkedIn:
> > http://www.linkedin.com/in/freddyvega
> >
> >
> >
> > GitHub:
> > http://github.com/freddyvega
> >
> >
> >
> > Twitter:
> >
> >
> > @freddyvega
> I did the changes in 2.50.40 version.
> I did exactly as the steps you mentioned, using admin user I gave one of the users access to only one project but that user still can access other projects.
> Maybe its a version thing.

Freedy,

Did you get time to test project specific user it on version 2.50.50 as it is not working in that version

[Freddy Vega]

Just wondering if you guys restart RHQ server after applying the changes?

> > To unsubscribe from this group and all its topics, send an email to primatest-automation+unsub...@googlegroups.com.

> >
> > For more options, visit https://groups.google.com/d/optout.
> >
> >
> >
> >
> >
> > --
> >
> >
> >
> > Freddy Vega
> >
> > My Blog:
> > http://blog.teamvgp.com
> >
> > Join me on LinkedIn:
> > http://www.linkedin.com/in/freddyvega
> >
> >
> >
> > GitHub:
> > http://github.com/freddyvega
> >
> >
> >
> > Twitter:
> >
> >
> > @freddyvega
> I did the changes in 2.50.40 version.
> I did exactly as the steps you mentioned, using admin user I gave one of the users access to only one project but that user still can access other projects.
> Maybe its a version thing.


Freedy,

Did you get time to test project specific user it on version 2.50.50 as it is not working in that version

--
You received this message because you are subscribed to a topic in the Google Groups "PrimaTest Automation" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/primatest-automation/59cB7rlvZ5Y/unsubscribe.

To unsubscribe from this group and all its topics, send an email to primatest-automation+unsub...@googlegroups.com.

[deymozumdar .]

Freddy

Yes we did after applying the changes in 2.5.5 version but it is not working 

Regards

Subrato

> > To unsubscribe from this group and all its topics, send an email to primatest-automation+unsubscrib...@googlegroups.com.

> >
> > For more options, visit https://groups.google.com/d/optout.
> >
> >
> >
> >
> >
> > --
> >
> >
> >
> > Freddy Vega
> >
> > My Blog:
> > http://blog.teamvgp.com
> >
> > Join me on LinkedIn:
> > http://www.linkedin.com/in/freddyvega
> >
> >
> >
> > GitHub:
> > http://github.com/freddyvega
> >
> >
> >
> > Twitter:
> >
> >
> > @freddyvega
> I did the changes in 2.50.40 version.
> I did exactly as the steps you mentioned, using admin user I gave one of the users access to only one project but that user still can access other projects.
> Maybe its a version thing.


Freedy,

Did you get time to test project specific user it on version 2.50.50 as it is not working in that version

--
You received this message because you are subscribed to a topic in the Google Groups "PrimaTest Automation" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/primatest-automation/59cB7rlvZ5Y/unsubscribe.

To unsubscribe from this group and all its topics, send an email to primatest-automation+unsubscrib...@googlegroups.com.

[Freddy Vega]

What is not working? The fact that users can still access projects?

As I've said before, I am using 2.4 version and have no plans to upgrade to 2.5. Our codebase is from a fork of 2.4 and has deviated way too much from the original so it would he hard for us to do so.

We've added many new features including a new JavaScript Launcher that is integrated with Protractor for Angular based applications and integration with a private npm repo for library management. As well we have integration with Jenkins via a json config file that is consumed by our infrastructure code and produces Jenkins test build jobs that create executions on RHQ using our RHQ REST API. Plus many many other features.

I'm not sure why the conditional access does not work on 2.5 but as you can see from reading the group it does work on 2.4! Any reason why you can use 2.4?

[deymozumdar .]

Freddy,

Are you suggesting to downgrade from 2.5.5 server intsall to 2.4 server install and test all the add-on features

Also how can we downgrade mongodb from 3.2 for it to work with 2.4 version

Please suggest as we have built about 200 odd test cases in 2.5.5 

[Freddy Vega]

I’m not recommending that you that at all. All I am saying is that in order to use the features we have developed someone has to either:

1. Install them and use them in the same version we have (2.4)

2. Port the feature from our 2.4 codebase on github to 2.5 and then let folks know how to do that.

3. Add the feature from scratch to 2.5 using our work as an example.

4. Put in a request for the next version to the Prima Test folks to approve the PR for this feature and include it in their next release.

We, meaning my company, won’t be upgrading to 2.5 anytime soon do we don’t currently have this need.

Freddy

> > To unsubscribe from this group and all its topics, send an email to primatest-automa...@googlegroups.com.

> >
> > For more options, visit https://groups.google.com/d/optout.
> >
> >
> >
> >
> >
> > --
> >
> >
> >
> > Freddy Vega
> >
> > My Blog:
> > http://blog.teamvgp.com
> >
> > Join me on LinkedIn:
> > http://www.linkedin.com/in/freddyvega
> >
> >
> >
> > GitHub:
> > http://github.com/freddyvega
> >
> >
> >
> > Twitter:
> >
> >
> > @freddyvega
> I did the changes in 2.50.40 version.
> I did exactly as the steps you mentioned, using admin user I gave one of the users access to only one project but that user still can access other projects.
> Maybe its a version thing.


Freedy,

Did you get time to test project specific user it on version 2.50.50 as it is not working in that version

--
You received this message because you are subscribed to a topic in the Google Groups "PrimaTest Automation" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/primatest-automation/59cB7rlvZ5Y/unsubscribe.

To unsubscribe from this group and all its topics, send an email to primatest-automa...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[deymo...@gmail.com]

Thanks a lot Freddy

One question, how to enable logging..we are trying to make some change in routes/executionengine.js file and not able to see any logs either in server log or browser console

Please help

[Freddy Vega]

For console logs it’s just console.log(“your message”

For server.log it’s common.logger.info(“your message”)

--
You received this message because you are subscribed to a topic in the Google Groups "PrimaTest Automation" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/primatest-automation/59cB7rlvZ5Y/unsubscribe.
To unsubscribe from this group and all its topics, send an email to primatest-automa...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Freddy Vega]

Also don’t forget to restart the node process that runs The app.js (RHQ server) so the changes can take effect.

[Jerson Jair Vasco Upegui]

The problem is that the version 2.4 for redwoodhq on linux is not available. only I can to download the version 2.5.5 and I've a problem with the projects chooser . 
any user can see the new projects maked yet without to be assigned.
you can see this issue in the next video https://www.youtube.com/watch?v=2L-cIgquIkk
Also, I can make a bypass to this projects control using the url and the variable "Project"  (index.html?project=other_project_name)

> > To unsubscribe from this group and all its topics, send an email to primatest-automation+unsub...@googlegroups.com.

> >
> > For more options, visit https://groups.google.com/d/optout.
> >
> >
> >
> >
> >
> > --
> >
> >
> >
> > Freddy Vega
> >
> > My Blog:
> > http://blog.teamvgp.com
> >
> > Join me on LinkedIn:
> > http://www.linkedin.com/in/freddyvega
> >
> >
> >
> > GitHub:
> > http://github.com/freddyvega
> >
> >
> >
> > Twitter:
> >
> >
> > @freddyvega
> I did the changes in 2.50.40 version.
> I did exactly as the steps you mentioned, using admin user I gave one of the users access to only one project but that user still can access other projects.
> Maybe its a version thing.


Freedy,

Did you get time to test project specific user it on version 2.50.50 as it is not working in that version

--
You received this message because you are subscribed to a topic in the Google Groups "PrimaTest Automation" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/primatest-automation/59cB7rlvZ5Y/unsubscribe.

To unsubscribe from this group and all its topics, send an email to primatest-automation+unsub...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.