Information Asset Register

This repository contains the web application implementing the Information Asset Register for the University of Cambridge.

It contains a new combined version of both the frontend (React/Material-UI) and backend (django) built using the DevOps Django Boilerplate as a foundation. These were previous provided by separate projects (Frontend and Backend) using older frameworks.

Developer quickstart

Firstly, install docker-compose.

Copy the secrets.env.in file to secrets.env and fill in the required secrets:

• You will need to register some Google OAuth2 Client credentials as described in the example secrets file.

• In order for the backend to make lookup requests (institution names, etc) from outside of the CUDN, you'll to also populate the UCAMLOOKUP_* credentials appropriately. These can be left blank for development on a wired connection.

Then, most tasks can be performed via the compose.sh script:

# Start development server
$ ./compose.sh development

# Start development server in background
$ ./compose.sh development up -d

# View logs
$ ./compose.sh development logs

# Stop the development server
$ ./compose.sh development down

# Run tests
$ ./compose.sh tox run --rm tox

# Start a server using the production Docker image
$ ./compose.sh production build
$ ./compose.sh production up -d
$ ./compose.sh production exec production_app ./manage.py migrate

# Build documentation and write a code coverage report to build/
$ COMPOSE_ARGS="-v $PWD/build/:/tmp/tox-data/artefacts/" ./tox.sh

Additionally the tox.sh and manage_development.sh wrapper scripts provide convenient ways to run tox and management commands:

# Rebuild all testenvs
$ ./tox.sh -r

# Run only the flake8 tests
$ ./tox.sh -e flake8

# Run the migrate management command using the development images
$ ./manage_development.sh migrate

# Run tests and write coverage/documentation to build directory
$ ./compose.sh tox run -v $PWD:/tmp/workspace -e TOXINI_ARTEFACT_DIR=/tmp/workspace/build --rm tox

Authorisation

Login is provided by Raven OAuth2 but to be entitled to use the application your account must be a member of the uis-iar-users lookup group.

This restriction can be 'bypassed' locally by changing the group defined in api/defaultsettings.py to one which you are a member of (possibly uis-members). Be careful not to commit this change.

Notes on debugging

The Full-screen console debugger pudb has been included to allow you to run a debug in the docker-compose environment. To use, simply set the breakpoint using import pdb; pdb.set_trace() and attach to the container using:

docker attach iar_development_app_1

For a fuller description of how to debug follow the guide to debugging with pdb and Docker (it works just as well for pudb).

CI configuration

The project is configured with Gitlab AutoDevOps via Gitlab CI using the .gitlab-ci.yml file.

Copyright License

See the LICENSE file for details.