Commit Graph

224 Commits (2.4)

Author SHA1 Message Date
ppanero 36c0399f35 deny by default instead of read-only 2016-09-07 11:08:37 +02:00
ppanero 01cb9c7037 typosfixed for PR 2016-09-06 08:43:27 +02:00
ppanero d470b3371c shibboleth sso plugin index failure fixed 2016-09-05 11:28:43 +02:00
ppanero 32dddabfac shibboleth sso debug log capabilities added 2016-09-05 11:22:39 +02:00
Andreas Ziegler 1fcefa202c chg: replace 2 spaces after tab by double tab 2016-09-05 00:51:37 +02:00
Andreas Ziegler 4b8a82098d chg: replace 4 spaces after tab by double tab 2016-09-05 00:45:51 +02:00
Andreas Ziegler e6585ed46e chg: fix indention of 4 files 2016-08-23 04:27:28 +02:00
Iglocska 6171e61fdd Revert "chg: remove not used old plugin file"
This reverts commit dd8ec54e2a.
2016-08-22 17:51:30 +02:00
Andreas Ziegler fa8300adea chg: fix indention in some files 2016-08-22 03:40:17 +02:00
Andreas Ziegler 99e6ae7946 chg: add space after keywords if/for/foreach/while/switch/catch 2016-08-22 02:59:20 +02:00
Andreas Ziegler 1c641b809e chg: add spaces before opening curly brackets 2016-08-22 02:57:56 +02:00
Andreas Ziegler 56dc4734cf chg: add newline character before EOF 2016-08-22 02:42:59 +02:00
Andreas Ziegler c47e99d38a chg: remove usage of App::import in favor of ::uses 2016-08-21 23:42:28 +02:00
Andreas Ziegler dd8ec54e2a chg: remove not used old plugin file 2016-08-21 23:25:22 +02:00
Iglocska 8f3ac0970d fix: small fix to the Shibboleth authentication 2016-08-21 00:24:54 +02:00
ppanero 9e0801cc20 Bug fixing on shibboleth auth. DB group loading and missing email bugs fixed 2016-08-19 14:32:47 +02:00
ppanero 4cce700b8d Shibboleth authentication refined (Organization creation if the given one in the configuration does not exists). export process displaying as queued issue solved. Code changed in JobsController 2016-08-10 13:54:14 +02:00
ppanero d03ede615b SSO plugin (Shibboleth based). Instructions to enable and configure it are present in the app/Plugin/ShibbAuth/README.md 2016-08-04 16:34:09 +02:00
Iglocska ba16637b83 fix: Removed the field restrictions from the save() calls in the certauth plugin
- apparently cakephp also removes those fields from the beforevalidation hook, meaning that a plugin can potentially escape any data consolidation methods. Not sure if this is intended behaviour by cakephp...
2016-06-16 13:02:37 +02:00
Guilherme Capilé 397474bc91 apache compatibility adjustments 2016-06-07 18:19:25 -03:00
Guilherme Capilé fbf379a97b create an Organisation if a string is provided (and not org_id) 2016-06-07 15:38:39 -03:00
Richard van den Berg e247713461 Add userDefaults explanation 2016-06-07 11:49:40 +02:00
Richard van den Berg ecedabbcf6 Add missing Role, Organization, Server arrays to user 2016-06-07 11:43:27 +02:00
Richard van den Berg e3d8ab6fa5 Fix parentheses 2016-06-07 10:51:21 +02:00
Andreas Ziegler cadda1ae45 chg: remove obsolete files 2016-06-06 17:18:26 +02:00
Andreas Ziegler 5fc289d88e chg: use consistent lowercase true/false 2016-06-06 14:46:39 +02:00
Andreas Ziegler 1d06f25b38 chg: add newline character before EOF to non-minified (text-)files 2016-06-06 10:09:55 +02:00
Andreas Ziegler 0117555a99 chg: remove handling of unsupported OS Windows 2016-06-06 09:14:34 +02:00
Andreas Ziegler 958aa7c414 use consistent spacing around else if 2016-06-04 15:49:54 +02:00
Andreas Ziegler 985451642e add space after keywords if/for/foreach/while/switch/catch 2016-06-04 15:45:39 +02:00
Andreas Ziegler 8f9e152d8c add space before opening curly brackets 2016-06-04 15:45:11 +02:00
Andreas Ziegler c1eda1e04b remove single spaces after tabs 2016-06-04 01:54:19 +02:00
Andreas Ziegler 8a2352f7b8 remove single spaces in front of tabs 2016-06-04 01:14:25 +02:00
Andreas Ziegler 0fe692c56a remove whitespace at end of line 2016-06-04 01:10:45 +02:00
Andreas Ziegler 898ea1d97c remove whitespace (space/tab) from empty lines 2016-06-04 01:08:16 +02:00
Iglocska 4020628df4 chg: Further work on the soft deletes 2016-05-10 10:31:56 +02:00
Iglocska 262c3bda0d Fixed the logging of attribute deletes 2016-05-06 23:48:01 +02:00
William Robinet 4fea371c4b Fix permissions 2016-02-11 17:03:51 +01:00
William Robinet b726ccf955 Fix typos 2016-02-10 16:38:44 +01:00
iglocska 324418dcf9 Merge branch 'master' into 2.4-beta
Merge and upgrade of several new features

Conflicts:
	VERSION.json
	app/Controller/ShadowAttributesController.php
	app/Controller/TagsController.php
	app/Model/AppModel.php
	app/Model/Event.php
	app/Plugin/SysLogLogable/Model/Behavior/SysLogLogableBehavior.php
2015-11-08 23:26:19 +01:00
iglocska 16e7974fc0 Improved logging, fixes #695
- Added logging of failed login attempts
- Added (optional) logging of successful authentications
  - admin setting that has to be enabled
  - will log all API calls (both HTTP method and target url)

- optional logging of user IP address for all logs
  - each log entry created while this setting is enabled will log the IP address of the client
  - disabling it also hides the IPs from the interface
  - added new IP field for the log search (only if enabled)
2015-11-08 22:35:46 +01:00
iglocska e63d10f0d4 Various bugfixes 2015-10-18 23:10:25 +02:00
Iglocska e242c9add2 Set of changes to the sync
- finished preview feature
  - can now view events and attributes remotely
  - can copy over new event to local instance

- new sync mode (update)
  - allows to only pull changes to events that exist locally already
  - works well with the manual pull of events, no need to pull events that we didn't manually confirm, but can still update all events that we pulled over

- Fixed an issue with background tasks causing the logging to fail

- reworked connection test showing version numbers of both instances
  - also telling the admin whether the sync is compatible or not

- Further refactoring / tweaking of the vent view
2015-10-06 01:16:48 +02:00
Iglocska c73f71f243 Merge branch 'master' into feature/sg
The merging is complete

Conflicts:
	VERSION.json
	app/Console/Command/ServerShell.php
	app/Controller/AppController.php
	app/Controller/AttributesController.php
	app/Controller/EventsController.php
	app/Controller/PostsController.php
	app/Controller/UsersController.php
	app/Model/Attribute.php
	app/Model/Event.php
	app/Model/Log.php
	app/Model/Server.php
	app/Model/User.php
	app/View/Elements/side_menu.ctp
	app/View/Users/admin_index.ctp
	app/webroot/js/ajaxification.js
2015-06-10 22:54:20 +02:00
Guilherme Capilé d2eaccec31 removed session handling from plugin and moved to AppController 2015-04-28 11:25:13 -03:00
Iglocska c24704a6c2 Lots of progress
- further work on implementing the SG changes everywhere
- reworked the alert e-mails
- reworked a lot of the logging
- several convenience methods
2015-04-20 11:46:55 +02:00
Guilherme Capilé 6de2541c9a added user defaults to plugin 2015-04-16 22:14:43 -03:00
Guilherme Capilé 9179a2263f Added client SSL certificate authentication as a CakePHP plugin 2015-04-16 22:14:43 -03:00
Guilherme Capilé d0c3b44e34 Added client SSL certificate authentication as a CakePHP plugin 2015-04-16 22:14:43 -03:00
Richard van den Berg 0306912271 Remove gitlink for app/Plugin/CakeResque
CakeResque is installed with composer.phar

Removing the gitlink gets rid of this annoying error message:
No submodule mapping found in .gitmodules for path 'app/Plugin/CakeResque'
2015-03-24 10:27:13 +01:00
iglocska 6dc75d6b22 Integration of plugins / cake core into MISP as submodules
- easier installation script
- the goal is to reduce the procedure to a few steps
2014-02-07 09:03:28 +01:00
iglocska 5e8f65847f CakeResque inclusion 2014-02-06 13:09:08 +01:00
iglocska 70c7f650f6 Changes to the logging and scheduling
- Scheduled tasks for pull / push now working as intended
- Rescheduling of all tasks fixed
- protection against the rescheduled task ending up in the past

- further event history fixes
- fixed lots of erroneous logging
- performance improvement with logging (no longer loading controllers for no reason)
- logging extra actions that weren't logged before (proposal accept / discard, server pull / push)
2014-01-29 15:52:09 +01:00
iglocska 2740da9094 Changes to the log system
- View Event history now shows the logo of the org whose action triggered the log entry
- View Event History now shows different fields than before
- Proposals now logged
- Accepting / Discarding a proposal now doesn't create junk edit / delete entries as before.
- Creators of an event can now see all of the log entries altering an event in the event history log. This includes deleted events.
2014-01-28 16:27:58 +01:00
iglocska 0e744871bd Further work on the scheduled tasks
- Also some changes left off from the previous commit
2013-12-17 11:38:06 +01:00
iglocska 0f80145c6d :q 2013-11-06 10:52:18 +01:00
iglocska 7e6f73a776 Removal of the blacklist
- Since regexp can be used to blacklist things, there's no need to have
two separate features that accomplish the same thing

- Add a regexp named /1.1.1.1/ with nothing as replacement and it will
behave the same as adding a blacklist for 1.1.1.1 in the old system.
2013-07-05 14:34:32 +02:00
Christophe Vandeplas de8793fbfc Performance - caching of CakeRouting and url generation 2013-06-10 18:01:04 +02:00
Iglocska a707df1b31 Strict messages fixes #99 and user edit requiring to change password
fixes #67

- Plugins and the user model were throwing strict messages in php 5.4+
or with E_STRICT on php 5.3 and lower. Should be fixed.

- New cakePHP added automatic HTML5 validation to form fields, which
breaks fields that can alternatively be left empty to not be edited
(such as the password field in user edits) - removed the html5 form
validation from user edits.
2013-05-13 14:27:40 +02:00
Andras Iklody 3e89c80d09 Removed some obsolete code
- getName functions removed

- Fixed a reference to it in the logable behaviour
2013-04-18 08:49:59 +02:00
Andras Iklody ada0fd2bfb Some fixes to indeces not set
- Affecting Event creation, attribute deletion remotely and logging of
  event deletion
2013-04-17 15:40:01 +02:00
Andras Iklody 83294820bf Changes to logs and some minor changes
- Regexp, blacklist, roles, whitelists now logged

- adminCRUD now sets ID (for the logging) on edit

- some minor UI changes (removal of empty action menues on the left menu
  bar)
2013-03-07 11:51:43 +01:00
noud 98a2df0280 Import Whitelist
if Import Whitelist item has regex and no replacement, then do not allow
an attribute having value the regex and do not allow events having info
conform that regex.
2012-12-04 08:51:27 +01:00
noud 957b3e27b8 Merge branch 'master' into develop
Conflicts:
	app/Controller/ServersController.php
2012-11-20 11:01:18 +01:00
noud 6495787023 Audit log
Following events are now being logged: 
1. Adding a new user.
2. Deleting a user.
2012-10-31 15:34:43 +01:00
noud e0a18896e0 Audit log
Search logs allows for searching for “publish” as Action. Publish is
saved in the logs as an edit with the change being publish () => (1).
Now, edit (so unpublish) is still edit and publish is action.
2012-10-31 09:03:05 +01:00
noud 7bf0e2f882 Groups
Do not delete group if there is still Users as children.
2012-10-10 10:53:52 +02:00
noud 60c67d4e14 Audit log.
After change plugins, forgot to skip revision in SysLogLogableBehavior.
2012-09-24 16:17:54 +02:00
noud 8f3d624c1a Merge branch 'master' into develop
Conflicts:
	app/Controller/AppController.php
	app/Controller/AttributesController.php
	app/Controller/EventsController.php
	app/Controller/ServersController.php
	app/Controller/UsersController.php
	app/Model/Attribute.php
	app/Model/Event.php
	app/Model/Server.php
	app/Model/User.php
	app/View/Attributes/edit.ctp
	app/View/Attributes/index.ctp
	app/View/Elements/actions_menu.ctp
	app/View/Events/add.ctp
	app/View/Events/index.ctp
	app/View/Events/view.ctp
	app/View/Events/xml/view.ctp
	app/View/Servers/index.ctp
	app/View/Users/admin_index.ctp
2012-09-24 16:02:01 +02:00
noud 113b445bcf Better placement of plugins (touching RBAC & Audit log)
If it's just an existing behavior or lib,
place it in a plugin directory structure in <cydefsig>/plugins.

If there is a need to change an extern existing plugin,
extend the existing plugin by a new plugin in <cydefsig>/app/Plugin.

This way there is a very clean devision between own and external code.
The external code can be updated without touching own nor changed code.
2012-09-20 11:34:41 +02:00
noud 66c5312ea6 DataBase migrate, Audit and Access Control granulation. 2012-06-28 17:24:12 +02:00
root b4558887ce Revert "Audit and ACL first cut."
This reverts commit 5818231f48.
2012-06-26 09:40:52 +02:00
noud 5818231f48 Audit and ACL first cut. 2012-06-25 15:54:52 +02:00
Christophe Vandeplas 865a24d0bd Migration to CakePHP 2.1.
Most of the functionality migrated, Q&A review required.
2012-03-15 15:06:45 +01:00