google-nomulus/java/google/registry/request
guyben 19b7a7b3ec Allow only OWNERs to change owner-related data on registrar console
The console will have 2 different "updatable things":
- only ADMINs (GAE-admins and users in the support G-Suite group) can change the things in the "admin settings" tab (currently just the allowed TLDs)
- only OWNERs can change things from the other tabs: WHOIS info, certificates, whitelisted IPs, contacts etc.

Also, all ADMINs are now OWNERS of "non-REAL" registrars. Meaning - we're only
preventing ADMINs from editing "REAL" registrars (usually in production).

Specifically, OTE registrars on sandbox are NOT "REAL", meaning ADMINS will
still be able to update them.

This only changes the backend (registrar-settings endpoint). As-is, the console
website will still make ADMINs *think* they can change everything, but if they
try - they will get an error.

Changing the frontend will happen in the next CL - because I want to get this
out this release cycle and getting JS reviewed takes a long time :(

TESTED=deployed to alpha, and saw I can't update fields even as admin on REAL
registrars, but could change it on non-REAL registrars. Also checked that I can
update the allowed TLDs on REAL registrars

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=222698270
2018-12-03 18:56:28 -05:00
..
auth Allow only OWNERs to change owner-related data on registrar console 2018-12-03 18:56:28 -05:00
lock Use locking on async mapreduces 2018-08-10 13:44:25 -04:00
Action.java Clean up some code quality issues 2017-12-01 22:14:06 -05:00
Actions.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
BUILD Add metrics measuring all request processing times 2018-10-31 19:11:39 -04:00
FullServletPath.java Derive RDAP link paths from the received query 2017-11-07 17:24:20 -05:00
Header.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
HttpException.java Move AuthenticatedRegistrarAccessor to request/auth/ 2018-11-16 16:54:21 -05:00
JsonActionRunner.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
JsonPayload.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
JsonResponse.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
Modules.java Remove outdated credential modules 2018-10-03 12:08:55 -04:00
package-info.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
Parameter.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
ParameterMap.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
Payload.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
RequestComponentBuilder.java Remove Builder type param on RequestComponentBuilder/RequestHandler 2017-02-27 11:12:07 -05:00
RequestHandler.java Add metrics measuring all request processing times 2018-10-31 19:11:39 -04:00
RequestLogId.java Add tool to check if other requests are still running 2017-09-12 15:51:50 -04:00
RequestMethod.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
RequestMetrics.java Add metrics measuring all request processing times 2018-10-31 19:11:39 -04:00
RequestModule.java Add next page navigation for RDAP nameserver searches 2017-12-27 10:44:05 -05:00
RequestParameters.java Remove transition code for set of parameter refactoring 2018-07-14 01:37:03 -04:00
RequestPath.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
RequestScope.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
RequestUrl.java Add next page navigation for RDAP nameserver searches 2017-12-27 10:44:05 -05:00
Response.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
ResponseImpl.java Update copyright year on all license headers 2017-02-02 16:27:22 -05:00
Route.java Replace com.google.common.base.Function with java.util.function.Function 2017-12-27 11:08:55 -05:00
Router.java Replace com.google.common.base.Function with java.util.function.Function 2017-12-27 11:08:55 -05:00
RouterDisplayHelper.java Run automatic Java 8 conversion over codebase 2017-10-10 12:09:41 -04:00