Manage Access to credentialed-access projects Using Access Point Policies by Chrystinne · Pull Request #2293 · MIT-LCP/physionet-build

Commits on Nov 18, 2024

Set the bucket name for the S3 bucket containing the controlled access data.
Chrystinne
committed
Add S3_CONTROLLED_ACCESS_BUCKET to specify the default bucket for storing projects with a 'RESTRICTED/CREDENTIALED' access policy.
Chrystinne
committed
Add AccessPoint and AccessPointUser models.
Chrystinne
committed
Change references from AWS S3 bucket access policy to AWS S3 access point policy.
Chrystinne
committed
Change the creation of the bucket policy to now consider whether it is being created for the open data bucket or the controlled data bucket. This update also changes how we grant access to users fo…
Chrystinne
committed
Check if the AWS instance exists for the project. Modify the sign_dua view to use update_data_access_point_policy instead of the old bucket policy update method. Ensure the S3 credentials exist bef…
Chrystinne
committed
Fix s3 sync command for credentialed-access projects.
Chrystinne
committed
Add migration file for AccessPointUser and AccessPoint models.
Chrystinne
committed
Updating the s3_uri parameter based on the project's access type.
Chrystinne
committed

Commits on Nov 21, 2024

Commits on Nov 22, 2024

Commits on Dec 3, 2024

Fix the AccessPolicy type and configure the S3_CONTROLLED_ACCESS_BUCKET variable for testing purposes.
Chrystinne
committed

Commits on Jan 14, 2025

Commits on Jan 21, 2025

Move the logic for retrieving the access point name to the view layer.
Chrystinne
committed

Commits on Jan 22, 2025

Commits on Jan 27, 2025

Remove unused methods.
Chrystinne
committed

Commits on Jan 28, 2025

Refactor: remove redundant validation checks in template and view.
Chrystinne
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Manage Access to credentialed-access projects Using Access Point Policies#2293

Commits on Nov 18, 2024

Set the bucket name for the S3 bucket containing the controlled access data.

Add S3_CONTROLLED_ACCESS_BUCKET to specify the default bucket for storing projects with a 'RESTRICTED/CREDENTIALED' access policy.

Add AccessPoint and AccessPointUser models.

Change references from AWS S3 bucket access policy to AWS S3 access point policy.

Change the creation of the bucket policy to now consider whether it is being created for the open data bucket or the controlled data bucket. This update also changes how we grant access to users fo…

Check if the AWS instance exists for the project. Modify the sign_dua view to use update_data_access_point_policy instead of the old bucket policy update method. Ensure the S3 credentials exist bef…

Fix s3 sync command for credentialed-access projects.

Add migration file for AccessPointUser and AccessPoint models.

Updating the s3_uri parameter based on the project's access type.

Commits on Nov 21, 2024

Checking whether the user has signed the DUA before attempting to display the AWS sync command.

Avoid including aws_id as an argument in AWS.s3_uri().

Rename AccessPoint to AWSAccessPoint and AccessPointUser to AWSAccessPointUser. Associate access points with specific users instead of AWS principals. Modify the s3_uri() method to retrieve the AWS…

Update methods that retrieve access point and access point policy information to be compatible with the changes made in the AWSAccessPoint and AWSAccessPointUser models.

Adding a function to access the request object for retrieving the logged-in user in the AWS model.

Remove the previous migration file: 0078_accesspointuser_accesspoint.py.

Add new migration file.

Commits on Nov 22, 2024

Fix the bucket policy for the controlled-data-dev-server bucket.

Set the bucket policy for the controlled-access bucket upon its initial creation.

Commits on Dec 3, 2024

Fix the AccessPolicy type and configure the S3_CONTROLLED_ACCESS_BUCKET variable for testing purposes.

Commits on Jan 14, 2025

Fixing access point policy updates and user assignments. Updating only the specific access point policy being changed, and preventing the reassignment of existing users to different access points w…

Remove middleware, prevent display of AWS sync command when S3 URI is unavailable,and skip DUA signature check for open projects.

Commits on Jan 21, 2025

Move the logic for retrieving the access point name to the view layer.

Commits on Jan 22, 2025

Enforcing uniqueness of AWSAccessPointUser for (user, aws) and adding migration files necessary for this change.

Move the method for retrieving the S3 URI for a specific authorized user to the AWSAccessPoint model.

Commits on Jan 27, 2025

Remove unused methods.

Commits on Jan 28, 2025

Refactor: remove redundant validation checks in template and view.