4.30.1

• 4.30.1
  • AXONSHELL
    • AXONSHELL enhancements
  • API Library
    • API Library Enhancements

4.30.1

AXONSHELL

AXONSHELL enhancements

• NEW COMMAND GROUP:

  • axonshell system data-scopes - work with data scopes, commands:
    • axonshell system data-scopes create - Create a data scope.
    • axonshell system data-scopes delete - Delete a data scope.
    • axonshell system data-scopes get - Get data scopes.
    • axonshell system data-scopes update-description - Update the description of a data scope.
    • axonshell system data-scopes update-device-scopes - Update the device asset scopes of a data scope.
    • axonshell system data-scopes update-name - Update the name of a data scope.
    • axonshell system data-scopes update-user-scopes - Update the user asset scopes of a data scope.

• NEW ARGUMENTS:

  • For command axonshell system roles add:
    • --data-scope/-ds - Specify a data scope to associate with the role

• NEW COMMANDS:

  • For command group axonshell system roles:
    • axonshell system roles update-data-scope - Update a roles data scope.
    • axonshell system roles get-perms - Get a print out of all role permission categories and actions.

• MODIFIED ARGUMENTS:

  • For all commands in command group axonshell system roles:
    • --export-format/-xf:
      • Now supports str-args
      • str format changed, to get the old str format use str-args
      • Default format is now table
      • Added more metadata to output

API Library

API Library Enhancements

• client.data_scopes - new api model for working with data scopes

  • client.data_scopes.get - get data scopes
  • client.data_scopes.get_safe - get data scopes (will not error if data scope feature not enabled)
  • client.data_scopes.build_role_data_scope - build a data scope restriction for use in a system role
  • client.data_scopes.create - create a data scope
  • client.data_scopes.delete - delete a data scope
  • client.data_scopes.update_name - update the name of a data scope
  • client.data_scopes.update_description - update the description of a data scope
  • client.data_scopes.update_user_scopes - update the user asset scopes of a data scope
  • client.data_scopes.update_device_scopes - update the device asset scopes of a data scope
  • client.data_scopes.check_feature_enabled - throw an exception if data scope feature is not enabled
  • client.data_scopes.is_feature_enabled - check if data scope feature is enabled
  • client.data_scopes.check_exists - check if a data scope already exists with a name
  • client.data_scopes.get_asset_scopes - get all saved query's that are asset scopes for users and devices
  • client.data_scopes._get - private direct API method to get data scopes
  • client.data_scopes._delete - private direct API method to delete a data scope
  • client.data_scopes._create - private direct API method to create a data scope
  • client.data_scopes._update - private direct API method to update a data scope
  • client.data_scopes._update_from_model - private direct API method to update a data scope

• client.system_roles - new methods:

  • client.system_roles.update_data_scope - Update the data scope for a role

• client.system_roles.add - new arguments:

  • data_scope optional string with name or UUID of data scope for the role

What's Changed

• 4.30.1 by @lifehackjim in #188

Full Changelog: 4.30.0...4.30.1