google-nomulus/java/google/registry
guyben 19b7a7b3ec Allow only OWNERs to change owner-related data on registrar console
The console will have 2 different "updatable things":
- only ADMINs (GAE-admins and users in the support G-Suite group) can change the things in the "admin settings" tab (currently just the allowed TLDs)
- only OWNERs can change things from the other tabs: WHOIS info, certificates, whitelisted IPs, contacts etc.

Also, all ADMINs are now OWNERS of "non-REAL" registrars. Meaning - we're only
preventing ADMINs from editing "REAL" registrars (usually in production).

Specifically, OTE registrars on sandbox are NOT "REAL", meaning ADMINS will
still be able to update them.

This only changes the backend (registrar-settings endpoint). As-is, the console
website will still make ADMINs *think* they can change everything, but if they
try - they will get an error.

Changing the frontend will happen in the next CL - because I want to get this
out this release cycle and getting JS reviewed takes a long time :(

TESTED=deployed to alpha, and saw I can't update fields even as admin on REAL
registrars, but could change it on non-REAL registrars. Also checked that I can
update the allowed TLDs on REAL registrars

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=222698270
2018-12-03 18:56:28 -05:00
..
backup Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
batch Delete the verify entity integrity mapreduce 2018-09-20 11:19:36 -04:00
beam Make BillingModule.OVERALL_INVOICE_PREFIX configurable 2018-11-16 17:00:38 -05:00
bigquery Use @DefaultCredential for Cloud API access in GAE 2018-09-20 11:19:36 -04:00
builddefs Replace iteration over depsets with an explicit .to_list() call 2018-11-14 11:55:43 -05:00
config Make BillingModule.OVERALL_INVOICE_PREFIX configurable 2018-11-16 17:00:38 -05:00
cron Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
dns Update dependencies to satisfy strictness and remove -jpl_strict_deps feature 2018-09-14 21:33:08 -04:00
env Stop exporting EPP flow metrics to BigQuery 2018-10-08 16:59:29 -04:00
export Use proper external dependency references recognized by moe 2018-11-16 17:03:50 -05:00
flows Use AuthenticatedRegistrarAccessor in EppConsoleAction 2018-12-03 18:51:40 -05:00
gcs Clean up annotation imports in BUILD files 2018-06-27 15:28:53 -04:00
groups Add support G-Suite group whose members have ADMIN access to registrar console 2018-11-12 14:51:40 -05:00
idn Update IDN tables to comply with https://www.iana.org/help/idn-repository-procedure 2018-02-01 21:59:14 -05:00
keyring Allow choice of Keyring to be configured in YAML 2018-10-17 11:48:12 -04:00
loadtest Clean up annotation imports in BUILD files 2018-06-27 15:28:53 -04:00
mapreduce Use locking on async mapreduces 2018-08-10 13:44:25 -04:00
model Clean up some areas in preparation for externalized codebase 2018-11-16 16:51:11 -05:00
module Add support G-Suite group whose members have ADMIN access to registrar console 2018-11-12 14:51:40 -05:00
monitoring/whitebox Stop exporting EPP flow metrics to BigQuery 2018-10-08 16:59:29 -04:00
pricing Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
proxy Remove proxy's dependency on config 2018-11-16 16:57:30 -05:00
rdap Move AuthenticatedRegistrarAccessor to request/auth/ 2018-11-16 16:54:21 -05:00
rde Refactor StringGenerator bindings 2018-10-22 19:06:35 -04:00
reporting Make BillingModule.OVERALL_INVOICE_PREFIX configurable 2018-11-16 17:00:38 -05:00
request Allow only OWNERs to change owner-related data on registrar console 2018-12-03 18:56:28 -05:00
security Improve internal build system speed 2018-06-27 15:28:52 -04:00
storage/drive Clean up third_party imports in BUILD files 2018-07-14 01:11:51 -04:00
tldconfig/idn Remove the use of InjectRule in IdnLabelValidatorTest 2018-10-22 18:54:53 -04:00
tmch Refactor TmchCertificateAuthority 2018-10-25 14:40:38 -04:00
tools Change OTE "fake" address state to a valid value 2018-11-14 11:59:04 -05:00
ui Allow only OWNERs to change owner-related data on registrar console 2018-12-03 18:56:28 -05:00
util Clean up some areas in preparation for externalized codebase 2018-11-16 16:51:11 -05:00
whois Clean up annotation imports in BUILD files 2018-06-27 15:28:53 -04:00
xjc Run bazel installer as a argument to bash 2018-08-10 13:44:25 -04:00
xml Pretty-print actual XML in tests 2018-07-14 01:37:03 -04:00
BUILD Remove deprecated DNS subsystem 2018-09-14 12:01:08 -04:00
repositories.bzl Update apache sshd version 2018-10-08 16:59:29 -04:00