Commit Graph

245 Commits (361fb238e0f745e64b5e87e30a6c4c8d02d9d6bd)

Author SHA1 Message Date
iglocska 361fb238e0 Merge branch 'feature/gui' of https://github.com/MISP/MISP into feature/gui
Conflicts:
	app/Controller/EventsController.php
2013-06-05 17:46:35 +02:00
iglocska bc42dbd78c Filters updated and some changes for the sync
- visual changes
- date from/until fields
- published field
- a reset form button

- the org of an event added by a sync user will be that of the host
instance's own organisation identifier
2013-06-05 17:45:01 +02:00
Christophe Vandeplas e21acac23e fix incorrect location of loadModel for Attribute 2013-06-05 13:50:33 +02:00
iglocska 0410c1465e First version of the new filters on event index 2013-06-04 17:41:27 +02:00
iglocska 5b6544e580 Small fix to event view attribute access permissions
- Server only attributes not visible to members of another organisation
- fixed
2013-06-04 09:03:12 +02:00
iglocska 0b834464ac Changes to the event view
- reworked the way events are loaded and reloaded to check for
privileges
2013-06-03 17:23:34 +02:00
iglocska 5522578f68 Update to the shadow attributes
- UI changes
- changed the relationship between shadowattributes and events to be
hasMany
2013-06-03 16:25:43 +02:00
Andras 3d7355cf14 UI changes to event add/edit and change to events controller
- updated the UI for the event add and edit views

- change to the privileges when editing events - siteadmins could not edit
  events of other orgs.
2013-06-02 12:44:11 +02:00
iglocska 876381d295 Update to the IOC import tool
- Tries to resolve some branching to increase the number of successful
  imports

- Moved to the event view and the import only adds attributes without
  changing the event's data itself

- Visualisation of the original IOC, showing the successes and failures
2013-05-29 13:42:04 +02:00
Christophe Vandeplas e3ed847ba0 fixing some REST API and XML issues 2013-05-28 11:15:21 +02:00
Christophe Vandeplas 512c74e7bd minor cleanup 2013-05-22 12:49:40 +02:00
Christophe Vandeplas 0614db919e fixes information leakage vulnerability on REST XML outputs 2013-05-22 10:52:03 +02:00
Christophe Vandeplas 62a3da46f2 removed useless hop_count 2013-05-22 08:18:34 +02:00
Iglocska c653b91491 Further progress on the OpenIOC import
- works fine now, but a lot of data still gets discarded
2013-05-08 09:57:18 +02:00
Iglocska 9917179656 Further work on the IOCImport
- Also, major performance fix for the event view
2013-05-07 10:51:55 +02:00
Iglocska 60e4190b84 OpenIOC Importer
- Import from .ioc
- map to MISP attributes and insert them
- try to resolve AND logical operators where possible, otherwise discard
2013-05-06 16:53:54 +02:00
Iglocska c4bcf1c077 Fixes #88
- events searchable by uuid
	-> /events/view/<uuid>
2013-04-30 16:55:13 +02:00
iglocska e5087be61f Merge branch 'develop' of https://github.com/MISP/MISP into develop 2013-04-30 14:19:23 +02:00
Iglocska cf9546b3b0 Moved the ioc export to a component
- Less clutter
2013-04-30 14:17:48 +02:00
Iglocska 2b47fec2a5 Further changes to the export features
- fixed issues with some download exports not being downloaded
- eliminated some code repetition
2013-04-30 11:24:02 +02:00
Christophe Vandeplas 2776513395 moved fragmented massagedata to Model::beforeValidate() 2013-04-30 08:20:23 +02:00
Iglocska 87e3973e93 Issue with event publish logs failing
- info was not set with saveField. Fixed.
2013-04-29 16:17:58 +02:00
Iglocska 4c4696d4ea Changes to the export conditions
- attributes with to_ids == 0 won't be exported unless it's an XML
export
- Fix to a typo in the IOC export
2013-04-29 15:17:05 +02:00
iglocska 1663d77f85 Merge branch 'develop' of https://github.com/MISP/MISP into develop
Conflicts:
	app/Controller/EventsController.php
2013-04-29 14:13:31 +02:00
Iglocska af011e2b5f Typo with several _isSiteAdmin() calls fixed 2013-04-29 13:58:53 +02:00
Christophe Vandeplas 4cdfaf5730 first minor cleanup of export #78 2013-04-29 11:35:31 +02:00
Christophe Vandeplas 73e1053f4e fix rest authentication and further auth clean up 2013-04-29 11:22:46 +02:00
Andras Iklody 6332dbf05b Removal of more remnants of the old ACL and tightening of the filename
checks

- actAs acl removed from role and user models together with some extra
code related to the ACL

- Fix of the filename regex as pointed out by cvandeplas.
2013-04-29 10:52:07 +02:00
Andras Iklody eeaa071024 Removal of the remains of the old authorization / adding new ones where
needed
2013-04-26 14:43:44 +02:00
Andras Iklody b98818ebfb Small errors with the merge corrected
- some errors managed to slip through during the merge, should be fixed
2013-04-25 15:37:49 +02:00
Andras Iklody 4396cec8ea Integrated ownership, ACL and minor fixes
- Orgs can propose new attributes or changes to existing attributes for
  events that they do not own

- publishing users of the owner organisation can see, accept or discard
  them

- Reworked the access control

- minor fixes
2013-04-25 14:04:08 +02:00
Christophe Vandeplas 3be869a9d5 fix sanitization in Events #96 2013-04-24 15:49:35 +02:00
Christophe Vandeplas 665defe7b1 cleanup crappy sanitization 2013-04-22 15:22:20 +02:00
Christophe Vandeplas 23742c543c rewrote fetching of the related events 2013-04-22 15:04:27 +02:00
Andras Iklody 3e89c80d09 Removed some obsolete code
- getName functions removed

- Fixed a reference to it in the logable behaviour
2013-04-18 08:49:59 +02:00
Andras Iklody ada0fd2bfb Some fixes to indeces not set
- Affecting Event creation, attribute deletion remotely and logging of
  event deletion
2013-04-17 15:40:01 +02:00
Andras Iklody 9a6733acfd Removal of deprecated code
- The flag private is deprecated, removed together with the code that was
  affected by it
2013-04-17 11:13:09 +02:00
Andras Iklody 9be1f6c550 Fixed a sanitization issue with encrypted emails 2013-04-16 17:39:28 +02:00
Christophe Vandeplas 8029d7fa29 removes multiple correlation engines Fixes #83 but after testing issue
#95 comes to light
2013-04-16 16:59:12 +02:00
iglocska 3ab63b4697 Small edit fixes #75
- Event was not deleted when another non site-admin org user tried to
  delete an event due to the event not being read before its organisation
  was compared to that of the logged in user -> fixed.
2013-04-10 10:48:30 +02:00
iglocska 9e9bdcbfa4 Bug with pull
- Pulling all from the server list view would cause all new events to be
  pulled as intended, but attachments would not be pulled with their
  respective attributes

- the few lines of code responsible for loading the file and base64
  encrypting it for the transfer were misplaced within a correlation check

- fixed.
2013-03-26 16:33:24 +01:00
iglocska 5d42b81989 First version of an IOC export feature
- Builds basic .ioc file of an event, OR-ing all eligible attributes

- mass export via a zip file to be implemented later
2013-03-26 11:02:01 +01:00
iglocska b134ffd940 Extensions of filenames now validate if a number is included 2013-03-19 14:33:56 +01:00
iglocska 30c4969cbe Update to the validation of file names to allow _ in the extension 2013-03-19 14:31:35 +01:00
iglocska ef93e61efb Related events
- Implemented on request: related events created by the same organisation are now coloured red
2013-03-19 10:30:32 +01:00
iglocska 32de082c88 New export feature
- To restrict the authentication key from being used by interactive users,
implemented a new export page that uses the uses cake's user
authentication

- the old export features still exist for users with perm_auth enabled
  accounts - renamed to automation

- Exporting the events that found attributes belong to in a search
  attributes result page

- exporting of individual events to file by clicking a link in event view
2013-03-18 11:48:36 +01:00
iglocska d634d4ea47 Update to the targets of contact emails and more
- The original creator of an event will also get contacted by contact org
  if he/she has the contactalerts turned off.

- error in the SQL permissions of normal users and org admins - they
  weren't able to modify/delete events of their own organisation that they
  themselves didn't create
2013-03-13 16:45:40 +01:00
Andras Iklody 019e976783 Removed the js title bubble for related events
- Removed javascripts based title bubble showing the event info in related
  events / attributes and in the search attribute view.

- Replaced it with values provided by extra cake queries as the delay for
  fetching the info field through a js rest request was annoyingly slow

- some coding standards
2013-03-08 13:16:02 +01:00
Andras Iklody 0e18aa099b Attribute and event access
- Updated the check for authorisation to view an event and attribute as
  the system hid some valid combinations (such as a server only attribute
  in a higher distribution level event).
2013-03-07 18:16:00 +01:00
Andras Iklody 13f2a274e8 Previous edit was an error 2013-03-06 14:07:37 +01:00