Commit Graph

70 Commits (15f572c627b2a340d416698b5d2b92e249cb0c17)

Author SHA1 Message Date
iglocska 75acd63c46
fix: [security] Fix to a vulnerability related to the server index
- along with various support tools
- more information coming soon
2019-09-09 13:00:21 +02:00
Olivier BERT aef027c4b9 Accessibility: added roles and aria labels for many icons and icon links (server list, tags, users, roles, attributes, ...)
There is still much work to be done. But we are on the road.

Ideally, and in order to avoid code dupplicates, we should have some utility functions to generate a proper and accessible yes/no icon, an accessible icon link, etc. This would prevent the code from being filled with "aria-label" tags, since the "title" and "aria-label" properties are nearly always the same.
2019-04-02 15:31:34 +02:00
iglocska 4298633e32 fix: [UI] Missing sync / feed pull/push buttons re-added 2019-03-31 10:26:52 +02:00
iglocska a067fc769e new: [UI] Move to FA 5 2019-03-23 11:18:22 +01:00
iglocska d8ee91be68 chg: [refactor] Side menu generic templates moved 2019-02-13 14:45:01 +01:00
iglocska 498a7ae77c new: [feeds] Opened up feed inspection to host org users and added servers to overlap matrix 2019-01-20 10:19:05 +01:00
iglocska 9c5fbdd7e9 new: [server caching] Initial version WIP 2019-01-18 09:06:23 +01:00
iglocska 58997b9ac1 chg: [psr-2] Changed view files to space indentation instead of tabs
- *sniff sniff*
2018-07-20 09:29:50 +02:00
iglocska 59b17b5af6 new: [sync] Added flag to avoid using the proxy
- in some cases you have internal sync between instances in which case going through the proxy is silly
2018-07-02 16:56:50 +02:00
Steve Clement d0e26cefe8 - Fixed various typos/omissions etc 2018-01-12 16:40:19 +01:00
Steve Clement 8faf16fa8f - View/Servers -> __(' done 2018-01-11 11:39:43 +01:00
Steve Clement c941be0147 - View/Servers -> __(' done 2018-01-09 10:01:00 +01:00
Ángel González 926895733b Cosmetic changes
Change space indents to tabs
Remove ?> at end of file
Add or remove some indentation where appropriate
2017-05-08 00:45:57 +02:00
devnull- 9835b8932f Merge branch '2.4' into issues_1643 2017-04-27 10:04:32 +02:00
iglocska e637bb5118 chg: Further work on the accessibility changes 2017-03-14 17:12:35 +01:00
devnull- f24682f86a Merge branch '2.4' into issues_1643 2017-02-16 21:49:45 +01:00
iglocska f7594bde8d chg: Added ids to the server index 2017-02-02 17:30:26 +01:00
devnull- 4795c86295 Quick & Dirty 'without_email' & 'Unpublish_event' options for Sync Server 2017-01-05 16:43:22 +01:00
Iglocska ea6552b596 fix: Pull icon visible even when pull is not enabled for an instance, fixes #1608 2016-10-13 09:56:33 +02:00
iglocska 8c83896813 Merge branch 'sslclientsync' into 2.4.51 2016-08-18 10:03:53 +02:00
iglocska 444171bd2d Merge branch '2.4' into sslclientsync 2016-08-18 09:58:52 +02:00
iglocska f2f5194d19 First iteration of the internal sync rework 2016-08-10 16:27:24 +02:00
Raphaël Vinot f86642e784 fix: Last pushed/pulled ID are not in the db anymore 2016-08-03 14:09:30 +02:00
Richard van den Berg 81a5838131 Add support for sync server SSL client certificates 2016-08-01 16:30:22 +02:00
Andreas Ziegler 0fe692c56a remove whitespace at end of line 2016-06-04 01:10:45 +02:00
Andreas Ziegler 898ea1d97c remove whitespace (space/tab) from empty lines 2016-06-04 01:08:16 +02:00
William Robinet 4fea371c4b Fix permissions 2016-02-11 17:03:51 +01:00
iglocska 3061b37fc3 Fixed a serious issue with the snort/suricata export which would keep appending all eligible attributes over and over to the file instead of properly fetching them event by event resulting in a massive export file 2015-12-23 00:51:57 +01:00
iglocska 150b115c52 Fixed an invalid link, fixes #761 2015-12-17 00:15:35 +01:00
iglocska fdcac8b72c Further work on the filter UI 2015-10-18 09:36:55 +02:00
Iglocska e242c9add2 Set of changes to the sync
- finished preview feature
  - can now view events and attributes remotely
  - can copy over new event to local instance

- new sync mode (update)
  - allows to only pull changes to events that exist locally already
  - works well with the manual pull of events, no need to pull events that we didn't manually confirm, but can still update all events that we pulled over

- Fixed an issue with background tasks causing the logging to fail

- reworked connection test showing version numbers of both instances
  - also telling the admin whether the sync is compatible or not

- Further refactoring / tweaking of the vent view
2015-10-06 01:16:48 +02:00
Iglocska 6bcf104724 Progress on several features
- implemented a custom pagination tool for data sets that are not directly taken from teh db
  - currently creates a pagination object that mocks CakePHP pagination
  - supports the CakePHP pagination view helper
  - supports: pagination, sorting, custom filters

- implemented first step of the remote instance browser for admins
  - view an index of events on another instance
  - filter the events
  - uses the new pagination

- still missing:
  - remote event view
  - fetch event from remote instance

- reworked the event view
  - separated API and UI code path
    - major speedup for the API!
    - cleaner code as there was almost 0 overlap
  - discussions and attributes are now loaded separately from the event view
    - added after the event view loads via ajax
    - cleaner pagination
  - attribute pagination now finally allows for sorting
    - future improvement (coming soon): Show proposals only filter
    - filtering on the attributes in general
2015-09-29 02:54:25 +02:00
Iglocska ad21d5c35a Further work on the Sharing Groups 2015-08-03 14:12:20 +02:00
Iglocska 38f50e3917 Finished the connection test tool 2015-04-21 00:31:43 +02:00
Iglocska 3bbaae6439 New Server add / edit
- add the remote organisation while adding a server
- remote organisation can be chosen from the list of local or known remote organisations. Alternatively a new remote org can be created on the fly
- Several UI changes
2015-04-20 22:36:29 +02:00
Iglocska 00dd47ef5e Server moved to new org object
- relation added
- index updated
2015-04-20 15:12:36 +02:00
iglocska f5c717f067 UI now correctly shows if self-signed certificates are allowed for a link 2014-02-17 11:44:16 +01:00
iglocska a9d945ff19 Changes to the sync action pages
- fixed access control
- any admin can now encode new servers. Org admins can pull/push for their own instances.

- Upload certificates during an edit
2014-01-21 16:41:32 +01:00
iglocska c10d3e9b95 SSL certificate changes
- you can now upload a certificate file and allow a server link to use a provided self signed certificate. This should solve the issues that some organisations are having when trying to connect their instances
2014-01-16 08:47:25 +01:00
iglocska 2b11a78e22 Merge branch 'feature/roleChanges' into feature/XML_and_UI
Conflicts:
	app/Controller/UsersController.php
	app/View/Regexp/admin_add.ctp
	app/View/Regexp/admin_edit.ctp
	app/View/Regexp/admin_index.ctp
	app/View/Roles/admin_add.ctp
	app/View/Servers/add.ctp
	app/View/Servers/edit.ctp
	app/View/Servers/index.ctp
	app/View/Servers/pull.ctp
	app/View/Servers/push.ctp
2013-10-25 10:39:18 +02:00
iglocska 3c58e0071a Further work on the UI
- reworked almost all of the side menues to be centralised

- Some fixes for the IOC export not handling two new-ish types correctly

- Some changes to the menues (including a few options that didn't exist before)

- rework of the popovers in some forms
2013-10-24 16:41:42 +02:00
iglocska d27ddee207 First rework of the siteadmin role
- ADMIN org removed.

- Siteadmins are now identified by the perm_site_admin flag

- Siteadmins can now be of any organisation

- editing the regexp / whitelist rules can now be done by a special user with the perm_regexp_access in his/her role

- Executing a mass replace of attribute values based on the regexp rules cannot be initiated by a regexp/whitelist user, only by a site admin

- If the login page is reached without any users / roles defined they are automatically created (perviously it was only the user that was created)

- Org admins are restricted from assigning perm_site_admin, perm_sync and perm_regexp_access roles to users. This can only be done by a site admin.
2013-10-03 11:45:27 +02:00
iglocska 66a7791b33 Pivot threads and other changes
- Users can now see the path they took while jumping from related event to related event

- Removed the breadcrumbs

- Some UI changes (user menues were not showing the active page, etc)
2013-08-02 11:53:17 +02:00
iglocska 8d2595d592 Breadcrumbs for the views
- makes navigating the site easier
- some new css changes to support this
2013-07-31 15:08:10 +02:00
Christophe Vandeplas 2424cbbf26 Server push lower memory footprint solving OoM problem.
Enabled per-id push like pull
2013-07-17 14:06:24 +02:00
iglocska 1b79963ce8 UI changes applied to the actions menu
- The side menu is now fixed / relatively positioned based on the debug
mode, like the header and the footer.
2013-07-04 13:35:04 +02:00
Christophe Vandeplas 8fe83c333f micro cleanup of servers index 2013-06-19 14:58:48 +02:00
Christophe Vandeplas bdc973f9ed alignment of action buttons 2013-06-03 14:44:31 +02:00
Christophe Vandeplas e1296bad7e UI servers 2013-05-31 13:59:56 +02:00
Christophe Vandeplas 0fa30912a3 mirated first parts of nice GUI proposed by Alexandru of CERT-EU 2013-05-30 11:14:00 +02:00