MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity
1,017 Commits
42 Branches
370 Tags
181 MiB
Commit Graph

84 Commits (4242108b3e4a32c3681162056ed84186fceacc8d)

Author SHA1 Message Date
Christophe Vandeplas 8414264c3c UI fix login screen 2013-06-03 15:59:22 +02:00
Christophe Vandeplas bdc973f9ed alignment of action buttons 2013-06-03 14:44:31 +02:00
Andras b4846370c6 UI changes 2013-06-02 13:57:51 +02:00
Andras a27b3d7208 More UI changes 2013-06-02 13:51:41 +02:00
Christophe Vandeplas 9a256e04a5 UI rules and users improvements 2013-06-01 08:13:18 +02:00
Christophe Vandeplas 69251490ef Merge branch 'feature/gui' of https://github.com/MISP/MISP into 
feature/gui

Conflicts:
	app/View/Logs/admin_index.ctp
	app/View/Logs/admin_search.ctp
	app/View/Users/memberslist.ctp
 2013-05-31 17:50:00 +02:00
Christophe Vandeplas d3db196699 UI Logs, documentation, memberslist and fixed bug in highlight 2013-05-31 17:38:46 +02:00
iglocska d768d30e79 GUI changes for the user views 2013-05-31 15:42:53 +02:00
Christophe Vandeplas 0fa30912a3 mirated first parts of nice GUI proposed by Alexandru of CERT-EU 2013-05-30 11:14:00 +02:00
Iglocska 27a4dc8a41 Disabled HTML5 validation for Users/admin_add 
- the new cakephp HTML5 validation forced users to enter a GPG key under
all circumstances. Removed.
 2013-05-13 15:27:11 +02:00
Iglocska a707df1b31 Strict messages fixes #99 and user edit requiring to change password 
fixes #67

- Plugins and the user model were throwing strict messages in php 5.4+
or with E_STRICT on php 5.3 and lower. Should be fixed.

- New cakePHP added automatic HTML5 validation to form fields, which
breaks fields that can alternatively be left empty to not be edited
(such as the password field in user edits) - removed the html5 form
validation from user edits.
 2013-05-13 14:27:40 +02:00
Christophe Vandeplas d11422831e fix sanitization in Users #96 2013-04-24 13:06:35 +02:00
iglocska 0a06ceed3b E-mailing system for site-admins 
- site admins able to contact users by e-mail from within the system
- PGP encrypted where available
- Password reset with automatic temporary key generation
- all of the above options have a mass-email version where every user is
  contacted at once
- Potential new users can be contacted too (GPG key can be supplied)
 2013-03-25 16:38:56 +01:00
Andras Iklody b9d4ac9cba Subscription to alerts from contact reporter 
- Users can now choose to subscribe to receive e-mails from the "Contact
  Reporter" feature.
 2013-03-06 11:34:22 +01:00
deresz 29191bdde1 Merge branch 'develop' of /home/git/cydefsig into develop 2013-03-01 09:42:28 +01:00
Andras Iklody 0f947085cb Reworked the sync / release control 
- Fixed issues with the sync
	- Secondary publishes on remote servers failed
	- Introduced new fields in events to stop backward traverse of
	  edit information that lead to low performance and eroneous
	  distribution information updates when more than 2 servers were
	  linked
	- Deletion of an attribute now deletes on remote servers

- Changes to the event ownership
	- Original creator org now noted in the event itself
	- Only original creator org can change distribution
	- Events will show up with the original creator org for users
	  (admins can see both that and the owner of the event on the
	  local instance)
	- Server.organization now used in junction with the connecting
	  user's org and the instance's org (from the bootstrap) to
	  determine distribution flow control and access rights

- Lots of minor changes
 2013-02-19 15:37:35 +01:00
Christophe Vandeplas 27c809e5f2 further cleanup 2013-02-14 17:01:49 +01:00
Andras Iklody afed0f2046 Changes to link validation and minor fixes 
- Links get validated now to filter malicios code

- removed a double edit button in the case of an admin editing himself

- fixed an error with adding new attributes
 2013-02-11 11:26:34 +01:00
Andras Iklody 7f6f166838 Fixes to access rights, some sanitization, etc 
- Admins cannot manually change anyone's authkey, they need to generate a
  new one via the reset link

- Some pages could be accessed by changing the url - fixed (though needs
  further testing)

- Edited a change in the manual that may have been confusing

- Some changes to the way ACL is set up - still needs more work
 2013-02-04 17:55:35 +01:00
Andras Iklody 879a5fb282 Temporary fix for file-uploads under windows 
Added an alternate file-upload/download path creation for PHP_OS ==
'WINNT'

Also removed autofill for the login field
 2013-01-31 10:25:03 +01:00
Andras Iklody 29295e1380 changes to the admin org access and sanitization 
1. Some errors fixed in the way redirects worked for org admins

2. fixed some double sanitization resulting in incorrect characters
displayed in certain fields
 2013-01-30 11:49:55 +01:00
Noud de Brouwer 729e1e2206 coding standards 
Coding Standards.
 2013-01-28 08:57:30 +00:00
Noud de Brouwer a6371f5ad8 coding standards 
Coding Standards.
 2013-01-28 08:32:01 +00:00
Noud de Brouwer 78f0d7ce93 coding standards 
Coding Standards.
 2013-01-25 13:02:58 +00:00
Andras Iklody 9739cd1e35 Fix for the org admin privileges 
Editing / creating users and the organisation permissions for org admins
 2013-01-25 12:22:55 +01:00
Noud de Brouwer 48ad60eb61 GPG 
start of check/correct.
 2013-01-23 15:22:21 +00:00
Noud de Brouwer 7c33a412b2 RBAC 
admin must be able to edit role, where-ever.
 2013-01-22 14:39:54 +00:00
Noud de Brouwer afd7977929 coding standards 
Coding Standards.
 2012-12-19 02:33:09 +00:00
Noud de Brouwer 5b806d36f7 coding standards 
Coding Standards.
 2012-12-18 19:55:50 +00:00
Noud de Brouwer ea9aa8eb3a coding standards 
Coding Standards.
 2012-12-18 19:25:12 +00:00
Noud de Brouwer 8864ee78f7 generateAllFor<FieldName> 
so we can use an URL like:
http://localhost/<TableName>/generateAllFor<FieldName>/newValue/oldValue
for example:
http://localhost/events/generateAllForAnalysis/0/null
http://localhost/users/generateAllForInvitedBy/1/0
http://localhost/users/generateAllForRoleId/1/0
 2012-12-18 03:50:52 +00:00
Andras Iklody 716559d5e3 added a missing view for password changes 2012-12-17 17:37:37 +01:00
Andras Iklody 1ceadab700 Added features from branch analysis_levels 
-Analaysis levels setable for events as per milestone item 94
-Password change forced as per milestone item 109
-Added feedback on entered search terms for search attributes
-fixed the authentication issue
-some minor fixes
 2012-12-17 15:51:30 +01:00
noud f8d277cee6 ExtJs 
reverted, cause no need.
was:
does not show on production.
this is the ExtJs not being there?
or php (>5.2.8) not build without --disable-json.
 2012-12-12 16:23:28 +01:00
noud 26c8ad57ee Role 
renamed everything group to role (i.s.o. renaming just the visable).
 2012-12-12 16:15:01 +01:00
Andras Iklody b9fb6e95c4 Tiny histogram change 
Changed the height of the list of types to fit the amount of data
 2012-11-30 08:51:10 +01:00
noud 0a2a6d9c22 user 
no possibility to delete oneself.
 2012-11-29 09:38:13 +01:00
noud 8a9783400a terms 
removed termsaccepted and newsread from user add,
so the user herself has to accept the terms.
 2012-11-28 17:10:48 +01:00
noud 4e93fabbed html 
removed some html giving warnings.
 2012-11-20 15:17:42 +01:00
noud 491b225953 users views 
whole menu in admin_view.
active delete button in edit.
 2012-11-19 10:47:36 +01:00
noud ea0ab59e4f code standards 
corrections toward code standards.
 2012-11-14 17:16:36 +01:00
noud bcf5e58888 RBAC 
slight better left menu if no <ul><li>items.
 2012-11-09 11:28:51 +01:00
noud 94926312d9 RBAC 
better users views.
 2012-11-09 11:09:39 +01:00
noud a2bc237bcd RBAC 
should now respect Manage, so also edit, own and org events.‏
 2012-11-08 14:09:52 +01:00
noud 60910ae5db RBAC 
name all Role i.s.o. Group.
 2012-10-31 17:10:59 +01:00
noud 71179a946f Users 
name Delete User on button i.s.o. Delete.
 2012-10-30 15:32:27 +01:00
noud cbadc469c5 Users 
inactive Delete during edit of My Profile.
 2012-10-30 15:30:08 +01:00
noud f111a5e915 Users 
inactive Delete User in My Profile.
 2012-10-30 15:23:24 +01:00
noud 2e872430f6 ExtJs 
does not show on production.
this is the ExtJs not being there?
or php (>5.2.8) not build without --disable-json.
 2012-10-30 14:15:07 +01:00
noud f296a9381e RBAC 
real inactive buttons.
 2012-10-25 15:00:43 +02:00