Sybren A. Stüvel d0557445cd Fix privilege escalation leak ...

A PUT request on /api/user/{user-id} by the user themselves would allow
too much, and would allow self-granting of roles (including admin),
group membership (so join any arbitrary project) and pretend to be
service accounts.

2017-05-04 12:48:30 +02:00

..

__init__.py

p.view_node(): check node_id for validity, before sending it to the API

2016-08-24 14:49:30 +02:00

test_auth.py

Fix privilege escalation leak

2017-05-04 12:48:30 +02:00

test_bcloud_home_project.py

Ran 2to3 on unittests, same sort of manual fixups as before

2017-03-22 15:49:51 +01:00

test_blender_id_subclient.py

Updated unittest code so that we can create 100% valid projects.

2016-09-08 12:03:17 +02:00

test_cli.py

Ran 2to3 on unittests, same sort of manual fixups as before

2017-03-22 15:49:51 +01:00

test_encoding.py

Introducing Pillar Framework

2016-08-19 09:19:06 +02:00

test_file_caching.py

Ran 2to3 on unittests, same sort of manual fixups as before

2017-03-22 15:49:51 +01:00

test_file_storage_backends.py

Added simple mocking test for GCS

2017-03-22 16:43:17 +01:00

test_file_storage_moving.py

Ran 2to3 on unittests, same sort of manual fixups as before

2017-03-22 15:49:51 +01:00

test_file_storage.py

Allow upload of videos > 1080p

2017-03-31 14:52:58 +02:00

test_link_refresh.py

Ran 2to3 on unittests, same sort of manual fixups as before

2017-03-22 15:49:51 +01:00

test_local_auth.py

Python 3.6 compatibility: bytes vs strings stuff

2017-03-22 15:49:51 +01:00

test_node_type_utils.py

Added node_type_utils to assign permissions to certain node types.

2016-09-23 17:13:26 +02:00

test_nodes_moving.py

Python 3.6 compatibility: bytes vs strings stuff

2017-03-22 15:49:51 +01:00

test_nodes.py

Ran 2to3 on unittests, same sort of manual fixups as before

2017-03-22 15:49:51 +01:00

test_patch.py

Ran 2to3 on unittests, same sort of manual fixups as before

2017-03-22 15:49:51 +01:00

test_project_management.py

Python 3.6 compatibility: bytes vs strings stuff

2017-03-22 15:49:51 +01:00

test_service_badger.py

Ran 2to3 on unittests, same sort of manual fixups as before

2017-03-22 15:49:51 +01:00

test_utils.py

Python 3.6 compatibility: bytes vs strings stuff

2017-03-22 15:49:51 +01:00

video-tiny.mkv

Allow upload of videos > 1080p

2017-03-31 14:52:58 +02:00