conjur-asset-ui 1.4.2 → 1.6.0

data/app/src/clients/search.js

@@ -0,0 +1,5 @@
+export function fetch(rmanager, query) {
+    return rmanager
+        .callServer('GET', `/api/authz/\${account}/resources?search=${window.escape(query.replace('-', ' '))}`)
+        .end();
+}

data/app/src/components/app/__tests__/app-test.js

@@ -0,0 +1,22 @@
+/* global jest, describe, it, expect */
+
+'use strict';
+
+jest.mock('../../navbar/navbar');
+jest.dontMock('../app');
+
+var React = require('react/addons');
+var TestUtils = React.addons.TestUtils;
+var App = require('../app');
+
+describe('app', () => {
+    it('default render', () => {
+        var component = TestUtils.renderIntoDocument(
+          <App />
+        );
+
+        var element = TestUtils.findRenderedDOMComponentWithClass(component, 'container');
+
+        expect(element.getDOMNode()).toBe(true);
+    });
+});

data/app/src/components/app/app.js

@@ -0,0 +1,36 @@
+import React from 'react';
+import {RouteHandler} from 'react-router';
+import {FluxMixin} from 'fluxxor';
+
+import Navbar from '../navbar/navbar';
+import Flash from '../flash/flash';
+
+export default React.createClass({
+    displayName: 'App',
+
+    mixins: [FluxMixin(React)],
+
+    render() {
+        return (
+          <div className="container">
+            <Navbar username={this.getFlux().actions.getRManager().username} />
+            <Flash />
+            <div id="modal"></div>
+            <div id="content">
+              <RouteHandler />
+            </div>
+            <div id="bottom" className="navbar-default">
+              <a href="http://conjur.net" className="nav-item"
+                 target="_blank">&copy; 2014, Conjur Inc.</a>
+            </div>
+          </div>
+        );
+    },
+
+    componentDidMount() {
+        var flux = this.getFlux();
+
+        flux.actions.audit.loadAll(true);
+        flux.actions.resources.load('custom-type');
+    }
+});

data/app/src/components/app/wrapper.js

@@ -0,0 +1,17 @@
+import React from 'react';
+import {RouteHandler} from 'react-router';
+import {FluxMixin, StoreWatchMixin} from 'fluxxor';
+
+export default React.createClass({
+    displayName: 'Wrapper',
+
+    mixins: [FluxMixin(React), StoreWatchMixin('app')],
+
+    getStateFromFlux() {
+        return {};
+    },
+
+    render() {
+        return <RouteHandler />;
+    }
+});

data/app/src/components/audit/__tests__/table_header-test.js

@@ -0,0 +1,22 @@
+/* global jest, describe, it, expect */
+
+'use strict';
+
+jest.dontMock('../fields_mixin');
+jest.dontMock('../table_header');
+
+var React = require('react/addons');
+var TestUtils = React.addons.TestUtils;
+var TableHeader = require('../table_header');
+
+describe('AuditTableHeader', function() {
+    it('default render', function() {
+        var component = TestUtils.renderIntoDocument(
+          <TableHeader />
+        );
+
+        var element = TestUtils.findRenderedDOMComponentWithTag(component, 'th');
+
+        expect(element);
+    });
+});

data/app/src/components/audit/box.js

@@ -0,0 +1,9 @@
+var React = require('react');
+
+export default React.createClass({
+    displayName: 'AuditBox',
+
+    render() {
+
+    }
+});

data/app/src/components/audit/constants.js

@@ -0,0 +1,5 @@
+export default {
+    compactFields: ['auditview_user', 'auditview_action'],
+    extendedFields: ['timestamp', 'auditview_user', 'auditview_action'],
+    knownRolsourceTypes: ['user', 'group', 'host', 'layer', 'policy']
+};

data/app/src/components/audit/entry.js

@@ -0,0 +1,105 @@
+var React = require('react');
+
+import {map, isString} from 'lodash';
+
+var ResourceLink = require('../generic/resource_link'),
+    RoleLink = require('../generic/role_link');
+
+var FieldsMixin = require('./fields_mixin'),
+    Timestamp = require('./timestamp'),
+    humanizeEvent = require('./humanize_event');
+
+export default React.createClass({
+    displayName: 'AuditEntry',
+
+    mixins: [FieldsMixin],
+
+    propTypes: {
+        compact: React.PropTypes.bool
+    },
+
+    getDefaultProps() {
+        return {
+            compact: false
+        };
+    },
+
+    render() {
+        var items = map(this.fields(), (field) => {
+            var item = this.transformField(field, this.props[field]);
+
+            return (
+              <td key={field}>
+                {item}
+              </td>
+            );
+        });
+
+        return (
+          <tr className={this.props.action}>
+            {items}
+          </tr>
+        );
+    },
+
+    transformField(key, value) {
+        var ret = [''];
+
+        switch (key) {
+        case 'entities':
+            ret = [
+                isString(this.props.resource) ?
+                    <ResourceLink id={this.props.resource.id} /> : null,
+                isString(this.props.role) ?
+                    <RoleLink id={this.props.role} /> : null
+            ];
+
+            break;
+
+        case 'user':
+            if (isString(value)) {
+                ret = [<RoleLink id={value} />];
+            }
+
+            break;
+
+        case 'acting_as':
+            if ((isString(value)) && (value !== this.props.user)) {
+                ret = [<RoleLink id={value} />];
+            }
+
+            break;
+
+        case 'auditview_user': //virtual field
+            var actingUser = this.props.user;
+            var actingRole = this.props.acting_as;
+
+            ret = [<RoleLink id={actingUser} />];
+
+            if ((isString(actingRole)) && (actingRole !== actingUser)) {
+                ret.push([
+                    ' as ',
+                    <RoleLink id={actingRole} />
+                ]);
+            }
+
+            break;
+
+        case 'timestamp':
+            if (isString(value)) {
+                ret = [<Timestamp time={value} />];
+            }
+
+            break;
+
+        case 'auditview_action':
+            ret = humanizeEvent(this.props);
+            break;
+
+        default:
+            ret = [value];
+        }
+
+        return ret;
+    }
+});

data/app/src/components/audit/fields_mixin.js

@@ -0,0 +1,11 @@
+var constants = require('./constants');
+
+export default {
+    fields() {
+        if (this.props.compact) {
+            return constants.compactFields;
+        } else {
+            return constants.extendedFields;
+        }
+    }
+};

data/app/src/components/audit/humanize_event.js

@@ -0,0 +1,213 @@
+import React from 'react';
+import {compact, isString} from 'lodash';
+
+import ResourceLink from '../generic/resource_link';
+import RoleLink from '../generic/role_link';
+
+function humanizeKindResource(e) {
+    var msg;
+
+    if (e.action === 'check') {
+        if (e.allowed) {
+            msg = [
+                'performed ',
+                (<em>{e.privilege}</em>),
+                ' on ',
+                <ResourceLink id={e.resource} noIcon={true} />
+            ];
+
+        } else {
+            msg = [
+                'was ',
+                (<strong>denied permission</strong>),
+                ' to ',
+                (<em>{e.privilege}</em>),
+                ' ',
+                <ResourceLink id={e.resource} noIcon={true} />
+            ];
+        }
+
+    } else if (e.action === 'create') {
+        msg = [
+            ' created ',
+            <ResourceLink id={e.resource} noIcon={true} />,
+            ' owned by ',
+            <RoleLink id={e.owner} noIcon={true} />
+        ];
+
+    } else if (e.action === 'update') {
+        // this is suspicious, but CLI audit does this
+        msg = [
+            ' gave ',
+            <ResourceLink id={e.resource} noIcon={true} />,
+            ' to ',
+            <RoleLink id={e.owner} noIcon={true} />
+        ];
+
+    } else if (e.action === 'destroy') {
+        msg = [
+            ' deleted ',
+            <ResourceLink id={e.resource} noIcon={true} />
+        ];
+
+    } else if (e.action === 'permit') {
+        msg = [
+            ' permitted ',
+            <RoleLink id={e.grantee} noIcon={true} />,
+            ' to ',
+            (<em>{e.privilege}</em>),
+            ' ',
+            <ResourceLink id={e.resource} noIcon={true} />
+        ];
+
+        if (e.grant_option) {
+            msg.push(' with grant option');
+        }
+
+    } else if (e.action === 'deny') {
+        msg = [
+            ' denied ',
+            (<em>{e.privilege}</em>),
+            ' from ',
+            <RoleLink id={e.grantee} noIcon={true} />,
+            ' on ',
+            <ResourceLink id={e.resource} noIcon={true} />
+        ];
+
+    } else if (e.action === 'permitted_roles') {
+        msg = [
+            ' listed roles permitted to ',
+            (<em>{e.privilege}</em>),
+            ' on ',
+            <ResourceLink id={e.resource} noIcon={true} />
+        ];
+    }
+
+    return msg;
+}
+
+function humanizeKindRole(e) {
+    var msg;
+
+    if (e.action === 'check') {
+        if (e.allowed) {
+            msg = [
+                ' performed ',
+                (<em>{e.privilege}</em>),
+                ' on ',
+                <ResourceLink id={e.resource} noIcon={true} />
+            ];
+
+        } else {
+            msg = [
+                ' was ',
+                (<strong>denied permission</strong>),
+                ' to ',
+                (<em>{e.privilege}</em>),
+                ' on ',
+                <ResourceLink id={e.resource} noIcon={true} />
+            ];
+        }
+
+    } else if (e.action === 'grant') {
+        /* what was the point of commenting this out? */
+        msg = [
+            ' granted role ',
+            <RoleLink id={e.role} noIcon={true} />,
+            ' to ',
+            <RoleLink id={e.member} noIcon={true} />
+        ];
+
+        if (e.admin_option) {
+            msg.push(' with admin permission');
+        } else {
+            msg.push(' without admin permission');
+        }
+
+    } else if (e.action === 'revoke') {
+        msg = [
+            ' revoked role ',
+            <RoleLink id={e.role} noIcon={true} />,
+            ' from ',
+            <RoleLink id={e.member} noIcon={true} />
+        ];
+
+    } else if (e.action === 'create') {
+        msg = [
+            ' created role ',
+            <RoleLink id={e.role} noIcon={true} />
+        ];
+    }
+
+    return msg;
+}
+
+function humanizeKindAnnotation(e) {
+    var msg;
+
+    if (e.action === 'update') {
+        msg = [
+            ' updated annotation on ',
+            <ResourceLink id={e.resource} noIcon={true} />
+        ];
+    }
+
+    return msg;
+}
+
+function humanizeKindAudit(e) {
+    var msg,
+        actionPart = compact([e.facility, e.action]).join(':'),
+        parts = [actionPart];
+
+    if (isString(e.role)) {
+        parts.push(' by ');
+        parts.push(<RoleLink id={e.role} noIcon={true} />);
+    }
+
+    if (isString(e.resource_id)) {
+        parts.push(' on');
+        parts.push(<ResourceLink id={e.resource_id} noIcon={true} />);
+    }
+
+    if (isString(e.allowed)) {
+        parts.push(' (allowed: ' + e.allowed + ')');
+    }
+
+    msg = [' reported ', parts];
+
+    if (isString(e.audit_message)) {
+        msg.push('; message: ');
+        msg.push(e.audit_message);
+    }
+
+    return msg;
+}
+
+// TODO: make message a separate React Class
+export default function humanizeEvent(e) {
+    // copy of SHORT_FORMATS logic from cli-ruby:lib/conjur/command/audit.rb
+    var msg = [];
+
+    if (e.kind === 'resource') {
+        msg = humanizeKindResource(e);
+
+    } else if (e.kind === 'role') {
+        msg = humanizeKindRole(e);
+
+    } else if (e.kind === 'annotation') {
+        msg = humanizeKindAnnotation(e);
+
+    } else if (e.kind === 'audit') {
+        msg = humanizeKindAudit(e);
+
+    } else {
+        msg = [' unknown event: ' + e.kind + ':' + e.action + '!'];
+    }
+
+    if (isString(e.error)) {
+        msg.push(' (failed with ' + e.error + ')');
+    }
+
+    return msg;
+}