-
Notifications
You must be signed in to change notification settings - Fork 74
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
DR-765 Change code for Discovery enforcement
* Update the PAM protobuf to keeperapp-protobuf PR 106. * Change CMT_GENERAL to CMT_DISCOVERY for any discovery gateway action. * Added a readme on how to generate a protobuf python file. To enable Discovey ... ``` https://dev.keepersecurity.com/console/dev2/#login once logged in, navigate to Admin -> Roles find the role that belongs to the user you're using click on Enforcement Policies button click on Privileged Access Manager tab (left side menu panel) at the very bottom, you should see the Discovery enforcement ``` This enforcement permission via requests to the gateway. There are still commands in Commander that can be run by any person, which we may need to lock down.
- Loading branch information
1 parent
ec10db8
commit 4ac5dd3
Showing
5 changed files
with
106 additions
and
66 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,42 @@ | ||
# Protoc | ||
|
||
These files were generated with protoc 3.19.4. | ||
|
||
https://github.com/protocolbuffers/protobuf/releases/tag/v3.19.4 | ||
|
||
On macOS, you will need to approve the running of `protoc`. | ||
This can be done by running `protoc`, approving the dialog box, then going | ||
to the **Privacy & Security** tab in the **Settings**. | ||
In the **Security** section, allow `protoc` to run. | ||
The next time you run `protoc`, you'll still get a popup, but it will allow | ||
the application to run. | ||
|
||
## Generate a Python file | ||
|
||
Change into the directory, of the repo, that contains the .proto files. | ||
You need to be in that directory because the `.proto` file | ||
may include other `.proto` files. | ||
|
||
```shell | ||
/path/to/protoc-3.19.4-osx-x86_64/bin/protoc --python_out=.. FOO.proto | ||
``` | ||
In the prior directory, `FOO_pb2.py` will be created. | ||
Move the file into the `keepercommander/proto` directory. | ||
|
||
## Edit the file | ||
|
||
Ignore `# Generated by the protocol buffer compiler. DO NOT EDIT!` :) | ||
|
||
You'll need change the import files to relative style imports. For example, change .... | ||
|
||
```python | ||
import enterprise_pb2 as enterprise_pb2 | ||
import record_pb2 as record_pb2 | ||
``` | ||
|
||
to | ||
|
||
```python | ||
from . import enterprise_pb2 as enterprise_pb2 | ||
from . import record_pb2 as record_pb2 | ||
``` |
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.