gbrodman d3a1d0709e Only grant IAP access to the console for new users (#3167) ...

Currently we grant users IAP_SECURED_WEB_APP_USER_ROLE access to the
entire project upon creation if there is no preexisting group set up for
them to use. These users only need to be able to access the console, so
we should restrict it to the console.

If there is a group (which we do have in our prod + sandbox
configuration) then we just add them to that group instead and that
group controls all the privileges. So this is a no-op for our setup.

We prioritize the group -- if both the group and the IAP service ID are
specified, we'll still just add them to the group

b/534931170

2026-07-22 16:53:41 +00:00

..

src

Only grant IAP access to the console for new users (#3167)

2026-07-22 16:53:41 +00:00

build.gradle

Migrate external EPP proxy to integrated Nomulus EPP server (#3126)

2026-07-21 19:04:33 +00:00

buildscript-gradle.lockfile

Upgrade to Gradle 9 (#2993)

2026-03-30 17:15:55 +00:00

Dockerfile

Upgrade to Java 25 (#3000)

2026-04-02 21:23:00 +00:00

gradle.lockfile

Migrate external EPP proxy to integrated Nomulus EPP server (#3126)

2026-07-21 19:04:33 +00:00