Commit graph

12 commits

Author SHA1 Message Date
mcilwain
b03bd3b525 Remove UNRESERVED as a reservation type
This is a follow-up to Lai's refactoring of the get reservation types
code to return a set rather than a single type. Since we're always
returning a set now, the more natural way to represent a label that is
not reserved is to return an empty set rather than a set containing
UNRESERVED.

Also fixes some minor style issues I ran across regarding static
importing and test method naming that I ran across (no logic
implications).

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=151132116
2017-03-27 13:31:33 -04:00
jianglai
620d698479 Add validation during domain creation for locked down TLDs
During domain create/applicationcreate/allocate, domains that are on the reserved list(s) with nameserver restricted reservation type must set nameservers that are part of the allowed nameservers for that domain in the reserved list(s) applied to that TLD.

Additionally a boolean is added to Registry to indicate if a TLD is restricting domain create. If it is, only domains that are nameserver restricted can be registered.

For consistency with a similar feature that validates a TLD-wide nameserver whitelist, the per-domain nameserver validation is performed even when the operation is in super-user mode. Similarly, if a domain is nameserver restricted, nameservers must be supplied (i. e. the nameservers set cannot be empty) when registering the domain.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=150641269
2017-03-21 15:42:23 -04:00
jianglai
c426a80563 Add a new reservation type to support nameserver restrictions
A new field (allowedNameservers) is added to ReservedListEntry that stores the allow nameservers for the label. The field itself is a comma separated string, but the actual lines within a reserved list file (from which the field is parsed) uses colon to separate nameservers, to avoid conflicting with the commas used as primary separators in a CSV file.

Combined with upcoming update(s) that enables locking down an entire TLD to only delegate domains with a nameserver restricted reservation type, this change will enable us to restrict domain delegation to nameservers specifically specified in the allowed nameservers list, in order to prevent malicious delegation in case the registrar for a brand TLD is compromised.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=149989330
2017-03-21 14:56:31 -04:00
mcilwain
dd400f30f5 Don't allow duplicates in premium/reserved lists
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=148458642
2017-02-27 11:17:58 -05:00
jianglai
7f3941a843 Correct small grammatical error
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=146155052
2017-02-02 16:44:35 -05:00
cgoldfeder
4e34fd53f4 Update documentation about manually creating RDE commands
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=144451211
2017-01-18 11:05:06 -05:00
mountford
98bbf8e7a2 Add documentation about the initial setting of RDE cursors
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=143112635
2017-01-09 11:59:04 -05:00
mountford
348cea9d8d Clarify documentation about RDE cursors
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=142286219
2016-12-19 11:09:20 -05:00
mountford
2d11f12115 Post-submit changes to BRDA and RDE documentation
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=136196437
2016-10-14 17:49:14 -04:00
mountford
afcd04f190 Add open source documentation about BRDA deposits
Also contains some fixes to the RDE documentation, and adds some site map entries.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=136193503
2016-10-14 17:44:53 -04:00
mcilwain
148270a813 Split premium/reserved list management into separate docs
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=136089439
2016-10-14 17:00:33 -04:00
mountford
86dde1d976 Add open source RDE operational documentation
Taken from the SRE procedures page.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=136083695
2016-10-14 17:00:32 -04:00