{"push_id":821921859,"size":4,"distinct_size":4,"ref":"refs/heads/master","head":"5bf21e06ecc59158a571831956deb7de6658a2aa","before":"74f6356bd8b9054575c07b33c36a655901d4876d","commits":[{"sha":"5132e606c3d439f7970168c0a5f7bede4fae5b6b","author":{"email":"4a6636537ea38835a33f4e994a89d5506f14c67a@puppetlabs.com","name":"Jeremy Barlow"},"message":"(TK-268) Weight all deny ACEs before allow ACEs\n\nPreviously, the `ace-compare` function would sort ACEs in an ACL via\nmultiple criteria - by allow-all, then by exactness, etc.  This commit\nchanges the `ace-compare` function to weight all deny ACEs before\nall allow ACEs, regardless of any other attributes of the pattern.\n\nSince the ip portion of the match was removed, several of the associated\ntests and functionality related to ip was removed as well.  This work\nwas slated to be done soon as part of TK-265 anyway so it seemed better\nto go ahead and remove some of this code now rather than re-writing code\nthat would end up being thrown away soon after.","distinct":true,"url":"https://api.github.com/repos/puppetlabs/trapperkeeper-authorization/commits/5132e606c3d439f7970168c0a5f7bede4fae5b6b"},{"sha":"55efeb98b36b9fa596eefb8294158d1cee3fc0cd","author":{"email":"4a6636537ea38835a33f4e994a89d5506f14c67a@puppetlabs.com","name":"Jeremy Barlow"},"message":"(TK-265) Removed references to allow-ip and deny-ip\n\nThis commit removes `allow-ip` and `deny-ip`, along with any remaining\nreferences to those from tests.  This commit also removes a redundant\nhelper for creating mock ring requests.","distinct":true,"url":"https://api.github.com/repos/puppetlabs/trapperkeeper-authorization/commits/55efeb98b36b9fa596eefb8294158d1cee3fc0cd"},{"sha":"f760b645cc0d44d404531f4b89b7d99e16ced89e","author":{"email":"4a6636537ea38835a33f4e994a89d5506f14c67a@puppetlabs.com","name":"Jeremy Barlow"},"message":"(TK-268) Removed `allow-all` references and updated docs\n\nThis commit removes references to `allow-all`.  Those had been in place\nprimarily to support the special ordering for \"allow '*'\" ACEs, which\nwas removed in an earlier commit in this branch.  \"allow '*\"\" ACEs are\nnow treated more like other regex ACEs, similar to how \"deny '*'\" ACEs\nare handled.\n\nThis commit also modifies the authorization-config.md to indicate that\nrequests are denied when both an allow and a deny ACE matches the name\nfor a matching rule.","distinct":true,"url":"https://api.github.com/repos/puppetlabs/trapperkeeper-authorization/commits/f760b645cc0d44d404531f4b89b7d99e16ced89e"},{"sha":"5bf21e06ecc59158a571831956deb7de6658a2aa","author":{"email":"5f27a724a4143327a41b82eef2e1ecc03dda2555@gmail.com","name":"Nate Wolfe"},"message":"Merge pull request #21 from camlow325/maint/master/TK-268-deny-when-allow-deny-overlap\n\n(TK-265/TK-268) Remove IP ACE support and weight deny before allow ACEs","distinct":true,"url":"https://api.github.com/repos/puppetlabs/trapperkeeper-authorization/commits/5bf21e06ecc59158a571831956deb7de6658a2aa"}]}