10 commits

Author	SHA1	Message	Date
catborise	4d34d9d07c	fix: add an authorization matrix test and close the endpoints it finds ... Add webvirtcloud/test_authorization_matrix.py, which walks every named URL and checks that a user without any VM/compute relation only reaches an explicit allowlist, and that the global view_instances permission does not open consoles. It found: - /computes/<id>/... views without any check (compute_graph, get_compute_*, get_dom_capabilities, storages.get_volumes): the whole computes URL namespace is now wrapped with superuser_only, so a view added there later cannot be exposed by a missing decorator. - guess_mac_address (leaks dhcpd.conf host/MAC pairs), random_mac_address and guess_clone_name: superuser-only, like the buttons that use them. - check_instance: cross-tenant VM name lookup with no caller; removed. - getvvfile and get_vdi_url: reachable with only view_instances, and the .vv file contains the VNC password. Console access now follows one rule, instances.utils.can_open_console: an active superuser or an active owner of the VM. The global view_instances permission is read-only. It is used by the console page, novncd, getvvfile and get_vdi_url (getvvfile and the VDI tab are kept for virt-viewer users). The console page answers 403 instead of 500 when access is denied, with the same answer for a missing VM.	2026-10-02 20:33:12 +03:00
catborise	73d8fd71fb	fix(instances): guard mutations and refresh lists after sync	2026-09-28 14:56:19 +03:00
catborise	60565b05b3	fix(tests): decouple tests from local libvirt, support configurable test host, and fix URL/logging bugs	2026-09-25 11:51:45 +03:00
catborise	3633c0096e	refactor(console): replace deprecated optparse with argparse and fix regex escape sequences	2026-09-24 22:08:08 +03:00
catborise	217e106c8b	format python code with black	2022-11-02 08:54:35 +03:00
catborise	508e3609be	lint with black python. convert f style strings to old one. some small fixes	2020-11-05 12:34:31 +03:00
Real-Gecko	0f66187e80	More instances tests	2020-10-15 11:58:42 +06:00
Real-Gecko	5172a9f619	Accounts app improvements and tests	2020-10-14 14:25:05 +03:00
Real-Gecko	47009d47ca	Instances overhaul	2020-07-13 15:33:09 +06:00
Retspen	4d48e79341	Initial commit	2015-02-27 10:53:51 +02:00