deckhand/deckhand/engine
Doug Aaser 2786769de5 Fix encrypted doc rendering
This patchset fixes a bug where Deckhand was failing to perform
substitution and layering on document sets where all the documents had a
storagePolicy of encrypted. Deckhand would attempt to substitute from an
encrypted source document, but when that document marked as encrypted,
it fails because the source doc had been redacted. The behavior now goes
as follows:

- Resolve Barbican references before layering and substitution have been
  performed so that the prior two operations don't attempt to operate on a
  Barbican reference
- After substitution, redact the destination document if it is marked as
  encrypted
- Now, after substition, we can redact the rest of the documents and
  substitutions

Change-Id: I725775d554c9eed2692fc6203c416a7119646680
2019-10-04 16:33:46 +00:00
..
schemas schema: Fix metadata schema patterns 2019-01-18 21:52:04 +00:00
__init__.py optimization: Skip post-validation for rendered document cache hit 2018-10-02 18:58:07 -05:00
_replacement.py fix: Use schema instead of metadata.schema for replacement check 2018-10-31 15:02:28 -04:00
cache.py optimization: Skip post-validation for rendered document cache hit 2018-10-02 18:58:07 -05:00
document_validation.py Fix v2 schema support 2019-08-13 11:50:28 -05:00
layering.py Fix encrypted doc rendering 2019-10-04 16:33:46 +00:00
render.py fix: Redact secondhand substitutions of sensitive data 2018-10-25 09:39:50 -04:00
revision_diff.py Validate bucket diffing works with revision rollback 2018-10-18 19:07:42 +01:00
secrets_manager.py Fix encrypted doc rendering 2019-10-04 16:33:46 +00:00
utils.py Adding api for revisions deep diffing 2018-09-17 17:01:34 +05:30