Signed-off-by: Rémi Duraffort <remi.duraffort@linaro.org>

Also refactor the cancel code a bit to be shared across the
multiple APIs.

The V2 API class is doing everything the same except that the user
is set to AnonymousUser rather then None in case the user did not
authenticate.

Signed-off-by: Rémi Duraffort <remi.duraffort@linaro.org>

Signed-off-by: Rémi Duraffort <remi.duraffort@linaro.org>

Remove old permissions like dashboard_add, android_banchmark_views_app etc
Merge admin_device into change_device permissions
Merge admin_devicetype into change_devicetype permissions
Remove add_testjob permission
Merge admin_testjob, cancel_resubmit_testjob into change_testjob permission

Allow users to submit jobs regardless of permissions and leave the
authorization process to the new auth refactoring code already in
place.

This includes new auth backend, model changes, database migration
and code changes to support the new backend.

This way the exact name of the job log file is only in the helper. This will
allow to have compressed job log file.

Signed-off-by: Rémi Duraffort <remi.duraffort@linaro.org>

This field is never used.

Signed-off-by: Rémi Duraffort <remi.duraffort@linaro.org>

Signed-off-by: Neil Williams <neil.williams@linaro.org>

An admin can now delegate some permissions to normal users without needing to
give them super user access.

Ensure get_recent_jobs_for_device_type can return data
if job.actual_device has not been assigned, e.g. whilst
in Submitted.
Move the hostname check inside the loop

Signed-off-by: Neil Williams <neil.williams@linaro.org>

Ensure that the effect of applying the owner_only filter is
active (use a QuerySet, not a list) and stored (updating
the return value).

Change-Id: I811db9f86d489e8ee3f4750ac5e041fb1c97de9d
Signed-off-by: Neil Williams <neil.williams@linaro.org>

Change-Id: I8b4213cb666290e185a6c35a67bf8ca18aecc788

Exclude non-public TestJobs from the count and
exclude hidden device-types from the listing unless the
user authenticates and is a superuser.
Exclude device-types where all devices are retired.
Exclude device-types if display is set to false.

Change-Id: I0f885ac03d2dc6c45aeb1f92ada608d01278b3d3

Change-Id: I717c369c474e4f0936d25957e071073ef9e7db09

Calling yaml.load() on untrusted data is unsafe and can lead to remote code
execution.

This commit fixes remote code execution in:
* the submit page
* the xmlrpc api
* the scheduler
* lava-master and lava-slave

This bug was found by running bandit (https://github.com/PyCQA/bandit).

Change-Id: I80882f9baeb0e7e1c2127f602cc4b206213cb59f

No need for the check to Python2 or the mapping of a
Python3 module to a Python2 name.

Change-Id: I1c2df55c9d68cd2ccf0927a6dcc1c28240a03b0e

This moves lava-server to Python3 only. Packaging changes
are available in the python3 packaging branch.
Some helpers still need updates for Python3.
Update ./ci-run to not run Python2 unit tests.
Update validate_pipeline_devices XMLRPC API call to return
a valid xmlrpc Binary object using Python3.
Use Django from Stretch - stretch-backports is also
supported.
Update docs for removal of Python2 support and
therfore Jessie.

Change-Id: I60c4d5092aef4555cf01b193bda917f473906dd7

Change-Id: I6c753e93b6e3e51baf5c3602c499ef9699309cfc

requested_device_type is always defined (except for dynamic connection).
Also fix a crash in the API with dynamic connections.

Change-Id: Id41d60b45a34a9c955deb622f5c450ce2056ac53

This is not used anymore

Change-Id: I30068fe2b249ebeff69e389ccc83725dbea4fcba

Add new  XML-RPC api calls like to reflect changes in test job and devices models.
Update XML-RPC docs like results.make_custom_query to reflect the scheduler changes.
Update query docs for new conditions with examples.

Change-Id: I26de511abcfbe05de0e0b53504bbd2aa4e4cf1f4

For some functions, the TestJob status was lower cased and not
capitalized (like for most other functions).

Change-Id: Ic90d0ac27d6d13a4afb66125e60b1016e2e3fec6

In the old api, Device status are lower case while TestJob status are
capitalized.

Change-Id: I8556ca0506061bc0059d0f0b2174fd9d78532932

Getting numbers for state and health fields over XMLRPC api is
pretty useless. Convert them to strings instead.

Change-Id: I45a5f95afa00ca69a2f8778442de73f47da4d1e5

This patch is made of two parts:
1/ changing the Device and TestJob state machine
2/ rewrite of the TestJob scheduler

Tests for the scheduler and the state machine are still missing.

Change-Id: I80f55c0ba89f978875ab079d2bf595a3c963017b

Support xmlrpclib client api in python3

Change-Id: Ib714af997d6d81fa4f66f49a4d0b9cae4af77746

Change-Id: Idadcd27aa9fbd40c750af9e257f62fbc8dd03858

To get a valid device configuration YAML for devices like QEMU,
a context must be specified in the XML-RPC call.

Change-Id: I09aea5fcc71e56d71446bbe2931ce31aae451186

Change-Id: I1aeeda2ba5db79d1b083d86b172b515811f5b45e

Change-Id: I67995e179b726d923e58d1b6df1f8ed10421bf19

Removing v1 in lava-dispatcher project will be easier.

Change-Id: Ie283a1c415d8fe0a465d61164d03a30e383575ec

Remove all entries from urls.py in dashboard_app.
Remove some of the obsolete tests.
Remove some of the code so that rest of the server works ok.

Change-Id: I74f79f5ce02c4af00416e57299cbe2782fad7ddb

Change-Id: I4a74bf5bc11c4b626de4d2d43bd490f8781117fd

The return value is actually different when submitting multinode jobs or simple
jobs. This fixes the docstring to inform about that.

Change-Id: Iaf0e1570e180ad17c33a30b090c32cb9cdede9fd
Signed-off-by: Florent Jacquet <florent.jacquet@free-electrons.com>

Change-Id: I453df2485ae0776f2c419cb4129fc2b1b2df2339