Rahmat Hidayat

Decouple access management from appeal

1

### Summary Currently, `appeal` acts as the information holder for approval flow and user access. We can decouple those responsibilities by creating a new entity called `access` that manages user...

closes #246 Checklist - [x] list access API - [x] get access API - [ ] list user access API - [ ] create access on appeal creation with auto...

feat(grant): import pre-existing access from provider

2

closes #206

**Summary** Currently, almost all of the methods in repository doesn't accept `ctx` while it is necessary to pass so that for one request can share the same context **Proposed solution**...

**Describe the solution you'd like** 1. accept `dry_run` flag in payload ```diff message CreatePolicyRequest { Policy policy = 1; + bool dry_run = 2; } message UpdatePolicyRequest { string id...

some APIs expect an authorized user email to be present in the request header (metadata for GRPC). For example approve/reject approval API. On web, rely on the auth proxy to...

Custom group naming convention for metabase provider

1

for this PR: https://github.com/odpf/guardian/pull/162 **Describe the bug** custom groups created by guardian in metabase are added as resources **Context** 1. existing metabase provider supports `collection` and `database` resource access 2....

test: implement dockertest for repositories

1

closes #242

**Description** After removing an approver from an appeal, they still see that appeal in their approvals list (`GetUserApprovals`) **To Reproduce** 1. Remove an approver from an appeal 2. Ask the...