repository

Jan 30, 2024 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

+ const EMPTY_PLACEHOLDER_FOR_QUERY

type RoleGroupRepository

+ DeleteRoleGroupRoleMappingByRoleIds func(roleId []int, tx *pg.Tx) error

type RoleGroupRepositoryImpl

+ func (impl RoleGroupRepositoryImpl) DeleteRoleGroupRoleMappingByRoleIds(roleIds []int, tx *pg.Tx) error

type UserAuthRepository

+ DeleteRolesByIds func(roleIds []int, tx *pg.Tx) error

+ DeleteUserRoleByRoleIds func(roleIds []int, tx *pg.Tx) error

+ GetRoleForChartGroupEntity func(entity, app, act, accessType string) (RoleModel, error)

+ GetRoleForClusterEntity func(cluster, namespace, group, kind, resource, action string) (RoleModel, error)

+ GetRoleForJobsEntity func(entity, team, app, env, act string, workflow string) (RoleModel, error)

+ GetRoleForOtherEntity func(team, app, env, act, accessType string, oldValues bool) (RoleModel, error)

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) DeleteRolesByIds(roleIds []int, tx *pg.Tx) error

+ func (impl UserAuthRepositoryImpl) DeleteUserRoleByRoleIds(roleIds []int, tx *pg.Tx) error

+ func (impl UserAuthRepositoryImpl) GetRoleForChartGroupEntity(entity, app, act, accessType string) (RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRoleForClusterEntity(cluster, namespace, group, kind, resource, action string) (RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRoleForJobsEntity(entity, team, app, env, act string, workflow string) (RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRoleForOtherEntity(team, app, env, act, accessType string, oldValues bool) (RoleModel, error)

Dec 15, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 14, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type PValUpdateKey

+ const WorkflowObjPValUpdateKey

+ const WorkflowPValUpdateKey

type RoleCacheDetailObj

+ Workflow PValDetailObj

type RoleModel

+ Workflow string

type UserAuthRepository

+ GetRolesForWorkflow func(workflow, entityName string) ([]*RoleModel, error)

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) GetRolesForWorkflow(workflow, entityName string) ([]*RoleModel, error)

Dec 7, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Oct 30, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Oct 29, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Oct 20, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Sep 15, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Sep 14, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type RoleGroupRepository

+ CheckRoleGroupExistByCasbinName func(name string) (bool, error)

type RoleGroupRepositoryImpl

+ func (impl RoleGroupRepositoryImpl) CheckRoleGroupExistByCasbinName(name string) (bool, error)

Aug 23, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Aug 13, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jul 17, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jul 3, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 28, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 27, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 14, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 9, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 1, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 1, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

+ type PValDetailObj struct

+ IndexKeyMap map[int]PValUpdateKey

+ Value string

+ type PValUpdateKey string

+ const AppObjPValUpdateKey

+ const AppPValUpdateKey

+ const ClusterObjPValUpdateKey

+ const ClusterPValUpdateKey

+ const EntityNamePValUpdateKey

+ const EntityPValUpdateKey

+ const EnvObjPValUpdateKey

+ const EnvPValUpdateKey

+ const GroupObjPValUpdateKey

+ const GroupPValUpdateKey

+ const KindObjPValUpdateKey

+ const KindPValUpdateKey

+ const NamespaceObjPValUpdateKey

+ const NamespacePValUpdateKey

+ const ResourceObjPValUpdateKey

+ const ResourcePValUpdateKey

+ const TeamObjPValUpdateKey

+ const TeamPValUpdateKey

+ type PolicyCacheDetailObj struct

+ ResActObjSet []ResActObj

+ Sub PValDetailObj

+ Type PValDetailObj

+ type RbacDataCacheFactory interface

+ GetDefaultRoleDataAndPolicyByEntityAccessTypeAndRoleType func(entity, accessType, roleType string) (RoleCacheDetailObj, PolicyCacheDetailObj, error)

+ SyncPolicyCache func()

+ SyncRoleDataCache func()

+ type RbacDataCacheFactoryImpl struct

+ func NewRbacDataCacheFactoryImpl(logger *zap.SugaredLogger, ...) *RbacDataCacheFactoryImpl

+ func (impl *RbacDataCacheFactoryImpl) GetDefaultRoleDataAndPolicyByEntityAccessTypeAndRoleType(entity, accessType, roleType string) (RoleCacheDetailObj, PolicyCacheDetailObj, error)

+ func (impl *RbacDataCacheFactoryImpl) SyncPolicyCache()

+ func (impl *RbacDataCacheFactoryImpl) SyncRoleDataCache()

+ type RbacPolicyData struct

+ AccessType string

+ Deleted bool

+ Entity string

+ Id int

+ IsPresetRole bool

+ PolicyData string

+ Role string

+ TableName struct{}

+ type RbacPolicyDataRepository interface

+ CreateNewPolicyDataForRoleWithTxn func(model *RbacPolicyData, tx *pg.Tx) (*RbacPolicyData, error)

+ GetPolicyDataForAllRoles func() ([]*RbacPolicyData, error)

+ UpdatePolicyDataForRoleWithTxn func(model *RbacPolicyData, tx *pg.Tx) (*RbacPolicyData, error)

+ type RbacPolicyDataRepositoryImpl struct

+ func NewRbacPolicyDataRepositoryImpl(logger *zap.SugaredLogger, dbConnection *pg.DB) *RbacPolicyDataRepositoryImpl

+ func (repo *RbacPolicyDataRepositoryImpl) CreateNewPolicyDataForRoleWithTxn(model *RbacPolicyData, tx *pg.Tx) (*RbacPolicyData, error)

+ func (repo *RbacPolicyDataRepositoryImpl) GetPolicyDataForAllRoles() ([]*RbacPolicyData, error)

+ func (repo *RbacPolicyDataRepositoryImpl) UpdatePolicyDataForRoleWithTxn(model *RbacPolicyData, tx *pg.Tx) (*RbacPolicyData, error)

+ type RbacRoleData struct

+ AccessType string

+ Deleted bool

+ Entity string

+ Id int

+ IsPresetRole bool

+ Role string

+ RoleData string

+ RoleDescription string

+ RoleDisplayName string

+ TableName struct{}

+ type RbacRoleDataRepository interface

+ CreateNewRoleDataForRoleWithTxn func(model *RbacRoleData, tx *pg.Tx) (*RbacRoleData, error)

+ GetRoleDataForAllRoles func() ([]*RbacRoleData, error)

+ UpdateRoleDataForRoleWithTxn func(model *RbacRoleData, tx *pg.Tx) (*RbacRoleData, error)

+ type RbacRoleDataRepositoryImpl struct

+ func NewRbacRoleDataRepositoryImpl(logger *zap.SugaredLogger, dbConnection *pg.DB) *RbacRoleDataRepositoryImpl

+ func (repo *RbacRoleDataRepositoryImpl) CreateNewRoleDataForRoleWithTxn(model *RbacRoleData, tx *pg.Tx) (*RbacRoleData, error)

+ func (repo *RbacRoleDataRepositoryImpl) GetRoleDataForAllRoles() ([]*RbacRoleData, error)

+ func (repo *RbacRoleDataRepositoryImpl) UpdateRoleDataForRoleWithTxn(model *RbacRoleData, tx *pg.Tx) (*RbacRoleData, error)

+ type ResActObj struct

+ Act PValDetailObj

+ Obj PValDetailObj

+ Res PValDetailObj

+ type RoleCacheDetailObj struct

+ AccessType PValDetailObj

+ Action PValDetailObj

+ Cluster PValDetailObj

+ Entity PValDetailObj

+ EntityName PValDetailObj

+ Environment PValDetailObj

+ Group PValDetailObj

+ Kind PValDetailObj

+ Namespace PValDetailObj

+ Resource PValDetailObj

+ Role PValDetailObj

+ Team PValDetailObj

type RolePolicyDetails

+ Approver bool

type UserAuthRepository

+ CreateRoleWithTxn func(userModel *RoleModel, tx *pg.Tx) (*RoleModel, error)

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) CreateRoleWithTxn(userModel *RoleModel, tx *pg.Tx) (*RoleModel, error)

May 25, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 23, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type DefaultAuthPolicyRepository

+ GetPolicyByRoleTypeAndEntity func(roleType bean.RoleType, accessType string, entity string) (policy string, err error)

type DefaultAuthPolicyRepositoryImpl

+ func (impl DefaultAuthPolicyRepositoryImpl) GetPolicyByRoleTypeAndEntity(roleType bean.RoleType, accessType string, entity string) (policy string, err error)

type DefaultAuthRoleRepository

+ GetRoleByRoleTypeAndEntityType func(roleType bean.RoleType, accessType string, entity string) (role string, err error)

type DefaultAuthRoleRepositoryImpl

+ func (impl DefaultAuthRoleRepositoryImpl) GetRoleByRoleTypeAndEntityType(roleType bean.RoleType, accessType string, entity string) (role string, err error)

type RoleGroupRepository

+ UpdateRoleGroupIdForRoleGroupMappings func(roleId int, newRoleId int) (*RoleGroupRoleMapping, error)

type RoleGroupRepositoryImpl

+ func (impl RoleGroupRepositoryImpl) UpdateRoleGroupIdForRoleGroupMappings(roleId int, newRoleId int) (*RoleGroupRoleMapping, error)

type RolePolicyDetails

+ Cluster string

+ ClusterObj string

+ Group string

+ GroupObj string

+ Kind string

+ KindObj string

+ Namespace string

+ NamespaceObj string

+ Resource string

+ ResourceObj string

type UserAuthRepository

+ CreateDefaultPoliciesForAllTypes func(...) (bool, error, []casbin2.Policy)

+ CreateRolesWithAccessTypeAndEntity func(...) (bool, error)

+ GetRoleByFilterForAllTypes func(...) (RoleModel, error)

+ GetRolesByIds func(ids []int) ([]RoleModel, error)

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) CreateDefaultPoliciesForAllTypes(...) (bool, error, []casbin2.Policy)

+ func (impl UserAuthRepositoryImpl) CreateRolesWithAccessTypeAndEntity(...) (bool, error)

+ func (impl UserAuthRepositoryImpl) GetRoleByFilterForAllTypes(...) (RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRolesByIds(ids []int) ([]RoleModel, error)

type UserRepository

+ UpdateRoleIdForUserRolesMappings func(roleId int, newRoleId int) (*UserRoleModel, error)

type UserRepositoryImpl

+ func (impl UserRepositoryImpl) UpdateRoleIdForUserRolesMappings(roleId int, newRoleId int) (*UserRoleModel, error)

Apr 11, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Mar 28, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Feb 28, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Feb 27, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jan 31, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

+ type ClusterRolePolicyDetails struct

+ Cluster string

+ ClusterObj string

+ Entity string

+ Group string

+ GroupObj string

+ Kind string

+ KindObj string

+ Namespace string

+ NamespaceObj string

+ Resource string

+ ResourceObj string

type RoleGroupRepository

+ GetRolesByGroupNamesAndEntity func(groupNames []string, entity string) ([]*RoleModel, error)

type RoleGroupRepositoryImpl

+ func (impl RoleGroupRepositoryImpl) GetRolesByGroupNamesAndEntity(groupNames []string, entity string) ([]*RoleModel, error)

type RoleModel

+ Cluster string

+ Group string

+ Kind string

+ Namespace string

+ Resource string

type RoleType

+ const ENTITY_CLUSTER_ADMIN_TYPE

+ const ENTITY_CLUSTER_EDIT_TYPE

+ const ENTITY_CLUSTER_VIEW_TYPE

type UserAuthRepository

+ CreateDefaultPoliciesForClusterEntity func(entity, cluster, namespace, group, kind, resource string, tx *pg.Tx) (bool, error)

+ GetRoleByFilterForClusterEntity func(cluster, namespace, group, kind, resource, action string) (RoleModel, error)

+ GetRolesByUserIdAndEntityType func(userId int32, entityType string) ([]*RoleModel, error)

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) CreateDefaultPoliciesForClusterEntity(entity, cluster, namespace, group, kind, resource string, tx *pg.Tx) (bool, error)

+ func (impl UserAuthRepositoryImpl) GetRoleByFilterForClusterEntity(cluster, namespace, group, kind, resource, action string) (RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRolesByUserIdAndEntityType(userId int32, entityType string) ([]*RoleModel, error)

Jan 17, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jan 9, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jan 3, 2023 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 21, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 14, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 9, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 2, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 2, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Nov 25, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Nov 23, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Nov 16, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Nov 10, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Nov 3, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Nov 1, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type UserAudit

+ UpdatedOn time.Time

type UserAuditRepository

+ GetLatestUser func() (*UserAudit, error)

+ Update func(userAudit *UserAudit) error

type UserAuditRepositoryImpl

+ func (impl UserAuditRepositoryImpl) GetLatestUser() (*UserAudit, error)

+ func (impl UserAuditRepositoryImpl) Update(userAudit *UserAudit) error

Oct 18, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Oct 13, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Oct 8, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Sep 24, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type RoleGroupRepository

+ GetRolesByGroupNames func(groupNames []string) ([]*RoleModel, error)

type RoleGroupRepositoryImpl

+ func (impl RoleGroupRepositoryImpl) GetRolesByGroupNames(groupNames []string) ([]*RoleModel, error)

Sep 13, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Sep 1, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Sep 1, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Aug 30, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Aug 25, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type RoleGroupRepository

+ GetRolesByGroupCasbinName func(groupName string) ([]*RoleModel, error)

type RoleGroupRepositoryImpl

+ func (impl RoleGroupRepositoryImpl) GetRolesByGroupCasbinName(groupName string) ([]*RoleModel, error)

Jul 22, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jul 21, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jul 19, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jul 19, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type UserRepository

+ FetchUserMatchesByEmailIdExcludingApiTokenUser func(email string) ([]UserModel, error)

type UserRepositoryImpl

+ func (impl UserRepositoryImpl) FetchUserMatchesByEmailIdExcludingApiTokenUser(email string) ([]UserModel, error)

Jul 8, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jul 5, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jul 1, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 29, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 27, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 23, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 22, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 21, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 17, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 14, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 13, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 9, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Jun 8, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

+ type UserAudit struct

+ ClientIp string

+ CreatedOn time.Time

+ Id int32

+ TableName struct{}

+ UserId int32

+ type UserAuditRepository interface

+ GetLatestByUserId func(userId int32) (*UserAudit, error)

+ Save func(userAudit *UserAudit) error

+ type UserAuditRepositoryImpl struct

+ func NewUserAuditRepositoryImpl(dbConnection *pg.DB) *UserAuditRepositoryImpl

+ func (impl UserAuditRepositoryImpl) GetLatestByUserId(userId int32) (*UserAudit, error)

+ func (impl UserAuditRepositoryImpl) Save(userAudit *UserAudit) error

type UserModel

+ UserType string

type UserRepository

+ GetAllExcludingApiTokenUser func() ([]UserModel, error)

type UserRepositoryImpl

+ func (impl UserRepositoryImpl) GetAllExcludingApiTokenUser() ([]UserModel, error)

Jun 6, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 31, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 30, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 30, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 27, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 25, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 20, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 18, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 17, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

+ type SelfRegistrationRoles struct

+ Role string

+ TableName struct{}

+ type SelfRegistrationRolesRepository interface

+ GetAll func() ([]SelfRegistrationRoles, error)

+ type SelfRegistrationRolesRepositoryImpl struct

+ func NewSelfRegistrationRolesRepositoryImpl(dbConnection *pg.DB, logger *zap.SugaredLogger) *SelfRegistrationRolesRepositoryImpl

+ func (impl *SelfRegistrationRolesRepositoryImpl) GetAll() ([]SelfRegistrationRoles, error)

type UserAuthRepository

+ GetRoleByRoles func(roles []string) ([]RoleModel, error)

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) GetRoleByRoles(roles []string) ([]RoleModel, error)

May 10, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

May 2, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Apr 21, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Apr 17, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Apr 13, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Apr 7, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Apr 1, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Mar 29, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Mar 25, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Mar 21, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Mar 14, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Mar 10, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Mar 4, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Feb 25, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type RoleGroupRepository

+ DeleteRoleGroupRoleMappingByRoleId func(roleId int, tx *pg.Tx) error

type RoleGroupRepositoryImpl

+ func (impl RoleGroupRepositoryImpl) DeleteRoleGroupRoleMappingByRoleId(roleId int, tx *pg.Tx) error

type UserAuthRepository

+ DeleteRole func(role *RoleModel, tx *pg.Tx) error

+ DeleteUserRoleByRoleId func(roleId int, tx *pg.Tx) error

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) DeleteRole(role *RoleModel, tx *pg.Tx) error

+ func (impl UserAuthRepositoryImpl) DeleteUserRoleByRoleId(roleId int, tx *pg.Tx) error

Feb 14, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

+ const APP_TYPE

+ const CHART_GROUP_TYPE

+ const ENV_TYPE

+ const PROJECT_TYPE

+ type DefaultAuthPolicy struct

+ Id int

+ Policy string

+ RoleType string

+ TableName struct{}

+ type DefaultAuthPolicyRepository interface

+ CreatePolicy func(policy *DefaultAuthPolicy) (*DefaultAuthPolicy, error)

+ GetPolicyByRoleType func(roleType RoleType) (policy string, err error)

+ UpdatePolicyByRoleType func(policy string, roleType RoleType) (*DefaultAuthPolicy, error)

+ type DefaultAuthPolicyRepositoryImpl struct

+ func NewDefaultAuthPolicyRepositoryImpl(dbConnection *pg.DB, logger *zap.SugaredLogger) *DefaultAuthPolicyRepositoryImpl

+ func (impl DefaultAuthPolicyRepositoryImpl) CreatePolicy(policy *DefaultAuthPolicy) (*DefaultAuthPolicy, error)

+ func (impl DefaultAuthPolicyRepositoryImpl) GetPolicyByRoleType(roleType RoleType) (policy string, err error)

+ func (impl DefaultAuthPolicyRepositoryImpl) UpdatePolicyByRoleType(policy string, roleType RoleType) (*DefaultAuthPolicy, error)

+ type DefaultAuthRole struct

+ Id int

+ Role string

+ RoleType string

+ TableName struct{}

+ type DefaultAuthRoleRepository interface

+ CreateRole func(role *DefaultAuthRole) (*DefaultAuthRole, error)

+ GetRoleByRoleType func(roleType RoleType) (role string, err error)

+ UpdateRole func(role *DefaultAuthRole) (*DefaultAuthRole, error)

+ type DefaultAuthRoleRepositoryImpl struct

+ func NewDefaultAuthRoleRepositoryImpl(dbConnection *pg.DB, logger *zap.SugaredLogger) *DefaultAuthRoleRepositoryImpl

+ func (impl DefaultAuthRoleRepositoryImpl) CreateRole(role *DefaultAuthRole) (*DefaultAuthRole, error)

+ func (impl DefaultAuthRoleRepositoryImpl) GetRoleByRoleType(roleType RoleType) (role string, err error)

+ func (impl DefaultAuthRoleRepositoryImpl) UpdateRole(role *DefaultAuthRole) (*DefaultAuthRole, error)

+ type RolePolicyDetails struct

+ App string

+ AppObj string

+ Entity string

+ EntityName string

+ Env string

+ EnvObj string

+ Team string

+ TeamObj string

+ type RoleType string

+ const ADMIN_TYPE

+ const ENTITY_ALL_TYPE

+ const ENTITY_SPECIFIC_ADMIN_TYPE

+ const ENTITY_SPECIFIC_TYPE

+ const ENTITY_SPECIFIC_VIEW_TYPE

+ const ENTITY_VIEW_TYPE

+ const MANAGER_TYPE

+ const ROLE_SPECIFIC_TYPE

+ const TRIGGER_TYPE

+ const VIEW_TYPE

type UserAuthRepository

+ DeleteRoles func(roles []*RoleModel, tx *pg.Tx) error

+ GetRolesByActionAndAccessType func(action string, accessType string) ([]RoleModel, error)

+ GetRolesForApp func(appName string) ([]*RoleModel, error)

+ GetRolesForChartGroup func(chartGroupName string) ([]*RoleModel, error)

+ GetRolesForEnvironment func(envName string) ([]*RoleModel, error)

+ GetRolesForProject func(teamName string) ([]*RoleModel, error)

+ UpdateTriggerPolicyForTerminalAccess func() error

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) DeleteRoles(roles []*RoleModel, tx *pg.Tx) error

+ func (impl UserAuthRepositoryImpl) GetDefaultPolicyByRoleType(roleType RoleType) (policy string, err error)

+ func (impl UserAuthRepositoryImpl) GetDiffBetweenPolicies(oldPolicy string, newPolicy string) (addedPolicies []casbin.Policy, deletedPolicies []casbin.Policy, err error)

+ func (impl UserAuthRepositoryImpl) GetRolesByActionAndAccessType(action string, accessType string) ([]RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRolesForApp(appName string) ([]*RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRolesForChartGroup(chartGroupName string) ([]*RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRolesForEnvironment(envName string) ([]*RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRolesForProject(teamName string) ([]*RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetUpdatedAddedOrDeletedPolicies(policies []casbin.Policy, rolePolicyDetails RolePolicyDetails) (bean.PolicyRequest, error)

+ func (impl UserAuthRepositoryImpl) UpdateDefaultPolicyByRoleType(newPolicy string, roleType RoleType) (err error)

+ func (impl UserAuthRepositoryImpl) UpdateTriggerPolicyForTerminalAccess() (err error)

Feb 7, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

type RoleModel

+ AccessType string

type UserAuthRepository

+ CreateDefaultHelmPolicies func(team string, entityName string, env string, tx *pg.Tx) (bool, error)

+ CreateRoleForSuperAdminIfNotExists func(tx *pg.Tx) (bool, error)

type UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) CreateDefaultHelmPolicies(team string, entityName string, env string, tx *pg.Tx) (bool, error)

+ func (impl UserAuthRepositoryImpl) CreateRoleForSuperAdminIfNotExists(tx *pg.Tx) (bool, error)

Jan 8, 2022 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 29, 2021 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 23, 2021 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 17, 2021 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Dec 16, 2021 GO-2024-3260

  GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

Changes in this version

+ type RoleGroup struct

+ Active bool

+ CasbinName string

+ Description string

+ Id int32

+ Name string

+ TableName struct{}

+ type RoleGroupRepository interface

+ CreateRoleGroup func(model *RoleGroup, tx *pg.Tx) (*RoleGroup, error)

+ CreateRoleGroupRoleMapping func(model *RoleGroupRoleMapping, tx *pg.Tx) (*RoleGroupRoleMapping, error)

+ DeleteRoleGroupRoleMapping func(model *RoleGroupRoleMapping, tx *pg.Tx) (bool, error)

+ GetAllRoleGroup func() ([]*RoleGroup, error)

+ GetConnection func() (dbConnection *pg.DB)

+ GetRoleGroupById func(id int32) (*RoleGroup, error)

+ GetRoleGroupByName func(name string) (*RoleGroup, error)

+ GetRoleGroupListByCasbinNames func(name []string) ([]*RoleGroup, error)

+ GetRoleGroupListByName func(name string) ([]*RoleGroup, error)

+ GetRoleGroupListByNames func(groupNames []string) ([]*RoleGroup, error)

+ GetRoleGroupRoleMapping func(model int32) (*RoleGroupRoleMapping, error)

+ GetRoleGroupRoleMappingByRoleGroupId func(roleGroupId int32) ([]*RoleGroupRoleMapping, error)

+ GetRoleGroupRoleMappingByRoleGroupIds func(roleGroupIds []int32) ([]*RoleModel, error)

+ UpdateRoleGroup func(model *RoleGroup, tx *pg.Tx) (*RoleGroup, error)

+ type RoleGroupRepositoryImpl struct

+ Logger *zap.SugaredLogger

+ func NewRoleGroupRepositoryImpl(dbConnection *pg.DB, Logger *zap.SugaredLogger) *RoleGroupRepositoryImpl

+ func (impl *RoleGroupRepositoryImpl) GetConnection() (dbConnection *pg.DB)

+ func (impl RoleGroupRepositoryImpl) CreateRoleGroup(model *RoleGroup, tx *pg.Tx) (*RoleGroup, error)

+ func (impl RoleGroupRepositoryImpl) CreateRoleGroupRoleMapping(model *RoleGroupRoleMapping, tx *pg.Tx) (*RoleGroupRoleMapping, error)

+ func (impl RoleGroupRepositoryImpl) DeleteRoleGroupRoleMapping(model *RoleGroupRoleMapping, tx *pg.Tx) (bool, error)

+ func (impl RoleGroupRepositoryImpl) GetAllRoleGroup() ([]*RoleGroup, error)

+ func (impl RoleGroupRepositoryImpl) GetRoleGroupById(id int32) (*RoleGroup, error)

+ func (impl RoleGroupRepositoryImpl) GetRoleGroupByName(name string) (*RoleGroup, error)

+ func (impl RoleGroupRepositoryImpl) GetRoleGroupListByCasbinNames(names []string) ([]*RoleGroup, error)

+ func (impl RoleGroupRepositoryImpl) GetRoleGroupListByName(name string) ([]*RoleGroup, error)

+ func (impl RoleGroupRepositoryImpl) GetRoleGroupListByNames(groupNames []string) ([]*RoleGroup, error)

+ func (impl RoleGroupRepositoryImpl) GetRoleGroupRoleMapping(userRoleModelId int32) (*RoleGroupRoleMapping, error)

+ func (impl RoleGroupRepositoryImpl) GetRoleGroupRoleMappingByRoleGroupId(roleGroupId int32) ([]*RoleGroupRoleMapping, error)

+ func (impl RoleGroupRepositoryImpl) GetRoleGroupRoleMappingByRoleGroupIds(roleGroupIds []int32) ([]*RoleModel, error)

+ func (impl RoleGroupRepositoryImpl) UpdateRoleGroup(model *RoleGroup, tx *pg.Tx) (*RoleGroup, error)

+ type RoleGroupRoleMapping struct

+ Id int

+ RoleGroupId int32

+ RoleId int

+ TableName struct{}

+ type RoleModel struct

+ Action string

+ Entity string

+ EntityName string

+ Environment string

+ Id int

+ Role string

+ TableName struct{}

+ Team string

+ type UserAuthRepository interface

+ CreateDefaultPolicies func(team string, entityName string, env string, tx *pg.Tx) (bool, error)

+ CreateDefaultPoliciesForGlobalEntity func(entity string, entityName string, action string, tx *pg.Tx) (bool, error)

+ CreateRole func(userModel *RoleModel, tx *pg.Tx) (*RoleModel, error)

+ CreateUpdateDefaultPoliciesForSuperAdmin func(tx *pg.Tx) (bool, error)

+ CreateUserRoleMapping func(userRoleModel *UserRoleModel, tx *pg.Tx) (*UserRoleModel, error)

+ DeleteUserRoleMapping func(userRoleModel *UserRoleModel, tx *pg.Tx) (bool, error)

+ GetAllRole func() ([]RoleModel, error)

+ GetRoleByFilter func(entity string, team string, app string, env string, act string) (RoleModel, error)

+ GetRoleById func(id int) (*RoleModel, error)

+ GetRolesByGroupId func(userId int32) ([]*RoleModel, error)

+ GetRolesByUserId func(userId int32) ([]RoleModel, error)

+ GetUserRoleMappingByUserId func(userId int32) ([]*UserRoleModel, error)

+ SyncOrchestratorToCasbin func(team string, entityName string, env string, tx *pg.Tx) (bool, error)

+ type UserAuthRepositoryImpl struct

+ Logger *zap.SugaredLogger

+ func NewUserAuthRepositoryImpl(dbConnection *pg.DB, Logger *zap.SugaredLogger) *UserAuthRepositoryImpl

+ func (impl UserAuthRepositoryImpl) CreateDefaultPolicies(team string, entityName string, env string, tx *pg.Tx) (bool, error)

+ func (impl UserAuthRepositoryImpl) CreateDefaultPoliciesForGlobalEntity(entity string, entityName string, action string, tx *pg.Tx) (bool, error)

+ func (impl UserAuthRepositoryImpl) CreateRole(userModel *RoleModel, tx *pg.Tx) (*RoleModel, error)

+ func (impl UserAuthRepositoryImpl) CreateUpdateDefaultPoliciesForSuperAdmin(tx *pg.Tx) (bool, error)

+ func (impl UserAuthRepositoryImpl) CreateUserRoleMapping(userRoleModel *UserRoleModel, tx *pg.Tx) (*UserRoleModel, error)

+ func (impl UserAuthRepositoryImpl) DeleteUserRoleMapping(userRoleModel *UserRoleModel, tx *pg.Tx) (bool, error)

+ func (impl UserAuthRepositoryImpl) GetAllRole() ([]RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRole(role string) (*RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRoleByFilter(entity string, team string, app string, env string, act string) (RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRoleById(id int) (*RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRolesByGroupId(roleGroupId int32) ([]*RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetRolesByUserId(userId int32) ([]RoleModel, error)

+ func (impl UserAuthRepositoryImpl) GetUserRoleMappingByUserId(userId int32) ([]*UserRoleModel, error)

+ func (impl UserAuthRepositoryImpl) SyncOrchestratorToCasbin(team string, entityName string, env string, tx *pg.Tx) (bool, error)

+ type UserModel struct

+ AccessToken string

+ Active bool

+ EmailId string

+ Id int32

+ TableName struct{}

+ type UserRepository interface

+ CreateUser func(userModel *UserModel, tx *pg.Tx) (*UserModel, error)

+ FetchActiveOrDeletedUserByEmail func(email string) (*UserModel, error)

+ FetchActiveUserByEmail func(email string) (bean.UserInfo, error)

+ FetchUserDetailByEmail func(email string) (bean.UserInfo, error)

+ FetchUserMatchesByEmailId func(email string) ([]UserModel, error)

+ GetAll func() ([]UserModel, error)

+ GetById func(id int32) (*UserModel, error)

+ GetByIdIncludeDeleted func(id int32) (*UserModel, error)

+ GetByIds func(ids []int32) ([]UserModel, error)

+ GetConnection func() (dbConnection *pg.DB)

+ UpdateUser func(userModel *UserModel, tx *pg.Tx) (*UserModel, error)

+ type UserRepositoryImpl struct

+ Logger *zap.SugaredLogger

+ func NewUserRepositoryImpl(dbConnection *pg.DB) *UserRepositoryImpl

+ func (impl *UserRepositoryImpl) GetConnection() (dbConnection *pg.DB)

+ func (impl UserRepositoryImpl) CreateUser(userModel *UserModel, tx *pg.Tx) (*UserModel, error)

+ func (impl UserRepositoryImpl) FetchActiveOrDeletedUserByEmail(email string) (*UserModel, error)

+ func (impl UserRepositoryImpl) FetchActiveUserByEmail(email string) (bean.UserInfo, error)

+ func (impl UserRepositoryImpl) FetchUserDetailByEmail(email string) (bean.UserInfo, error)

+ func (impl UserRepositoryImpl) FetchUserMatchesByEmailId(email string) ([]UserModel, error)

+ func (impl UserRepositoryImpl) GetAll() ([]UserModel, error)

+ func (impl UserRepositoryImpl) GetById(id int32) (*UserModel, error)

+ func (impl UserRepositoryImpl) GetByIdIncludeDeleted(id int32) (*UserModel, error)

+ func (impl UserRepositoryImpl) GetByIds(ids []int32) ([]UserModel, error)

+ func (impl UserRepositoryImpl) UpdateUser(userModel *UserModel, tx *pg.Tx) (*UserModel, error)

+ type UserRoleModel struct

+ Id int

+ RoleId int

+ TableName struct{}

+ User UserModel

+ UserId int32