guardian

guardian copied to clipboard

Removing ORM and moving from Gorm to vanilla sql

2

**Summary** For some basic CRUD, ORM is helpful and help us faster in development. However, in our current state of Guardian, there are some cases when using gorm as an...

mabdh

Command to validate/lint guardian policy

1

**Summary** At the moment, guardian policy validation is done on creation. And any testing for the intricate steps require creating a policy and doing the whole appeal flow just to...

bsushmith

**Summary** Currently, almost all of the methods in repository doesn't accept `ctx` while it is necessary to pass so that for one request can share the same context **Proposed solution**...

rahmatrhd

Testing store with dockertest postgres instance

1

**Summary** Guardian is currently using `go-sqlmock` to test its store layer and there might be some specific cases that this approach does not cover since we are not testing the...

mabdh

Ability to configure roles for `gcloud_iam` provider

2

**Summary** At the moment, for every provider one can configure a set of roles with permission sets. It enables one to control the access roles to which a user can...

bsushmith

Appeal request on behalf of other user.

11

**Summary** As a user, they want to raise an appeal for another user in Guardian. This could help the manager/supervisor to raise all access-request for a user and sometimes this...

singhvikash11

Appeal approval outside Guardian

11

**Summary** Complex appeal approval flow can't be modelled using policy config YAML file so in that case, Guardian should be able to integrate with existing complex approval flow like `bpmn`....

singhvikash11

**Summary** Move AppealConfig from provider config to policy config. Related discussion - https://github.com/odpf/guardian/issues/213 ```yaml appeal: allow_active_access_extension_in: 24h ```

bsushmith

singhvikash11

feat: initial implementation of metabase group migration into guardian

2

singhvikash11