Commit Graph

201 Commits (4fea371c4b417e6eac5cdefe0baf77840f5752a1)

Author SHA1 Message Date
iglocska 08cb33b2bd Some minor changes
- Contextual comments added to all imports (GFI, ThreatConnect, OpenIOC)

- Some minor fixes to OpenIOC exports and linebreaks in attributes
2013-11-04 10:11:58 +01:00
iglocska dfeee892d6 Line breaks not shown in attribute values 2013-10-31 14:33:57 +01:00
iglocska d7b4c28552 Contextual comments
- Attributes now have a comment field
2013-10-30 16:00:46 +01:00
iglocska bbbc17a95b Merge remote-tracking branch 'origin/feature/XML_and_UI' into feature/discussion
- Also some improvements to the shadow attributes

- some minor UI changes

Conflicts:
	app/Controller/EventsController.php
	app/View/Elements/global_menu.ctp
	app/View/Layouts/default.ctp
2013-10-30 10:06:12 +01:00
iglocska b2b76779b9 More changes to the discussion boards
- quote / event tags

- anonymised e-mail addresses
2013-10-29 13:45:53 +01:00
iglocska d5d2e900c4 First revision of the unified menu and XML upload
- centalising the side menu for easier maintainability

- XML upload of event(s) from the interactive interface
2013-10-24 10:33:34 +02:00
iglocska 6895548877 Merge branch 'develop' into feature/discussion
- Pivots, attributes, discussions hideable

Conflicts:
	app/Controller/EventsController.php
	app/webroot/css/main.css
2013-09-10 16:51:56 +02:00
iglocska 7af9e4d731 Fix to the related attributes
- related atributes were flowing into the next field if there were too many to fit the 5% width

- hovering over a related attribute caused a misaligned tooltip to appear and block the link itself on IE
2013-09-10 09:13:52 +02:00
iglocska 1b901bfacb Further work on the pivoting
- still has some issues with arranging the height for some branching
2013-09-05 17:00:15 +02:00
iglocska 4ef6b2b9fd First refactoring of the pivoting 2013-09-05 10:40:53 +02:00
iglocska ea3b62f88a AJAX upgrade to the discussion board
- Quickpost without reloading the page with AJAX

- for page changes / adding posts show an animated spinner

- spinner div / styles available from every page (the div is located in the default layout and is hidden unless manually shown)
2013-08-19 17:26:06 +02:00
iglocska cf58ae2dc0 Discussions
- fully working version
- some improvements still possible (hiding discussion on demand, add/edit with ajax)
2013-08-19 10:03:18 +02:00
Alexandre Dulaunoy 06fbcc27f1 Vulnerability url is now configurable (Fix #153).
A global configuration CyDefSig.cveurl added to specify the URL
where to reference a CVE/NVD number. CyDefSig.cveurl is optional
and if not existing fallbacks to the original google.com URL.
2013-08-16 11:09:55 +02:00
iglocska 1ad3a8ffd6 Discussion boards
- First fully working version
- Create threads or create a thread attached to an event
- Add posts to threads / edit them / delete them
2013-08-14 17:46:57 +02:00
iglocska 62bec39759 First version of the event discussion UI 2013-08-14 08:45:05 +02:00
Christophe Vandeplas cb6482fd54 Merge branch 'develop' into 'master' for v2.1 2013-08-02 15:39:54 +02:00
iglocska fa1af3cd3b Pivot thread changed slightly
- There is a reset button in the first arrow

- adding an event that exists already in the list should not create a new pivot point
2013-08-02 15:23:48 +02:00
iglocska bfa8aa3d28 Jumping between pivot thread points changed
- no longer adds the event to the thread
2013-08-02 14:58:35 +02:00
iglocska 4cd55b90f8 Fixed the CSS issues with the pivot thread 2013-08-02 14:45:54 +02:00
iglocska 66a7791b33 Pivot threads and other changes
- Users can now see the path they took while jumping from related event to related event

- Removed the breadcrumbs

- Some UI changes (user menues were not showing the active page, etc)
2013-08-02 11:53:17 +02:00
iglocska 8d2595d592 Breadcrumbs for the views
- makes navigating the site easier
- some new css changes to support this
2013-07-31 15:08:10 +02:00
iglocska e577d587fd Discard shadowattribute changed to Postlink
- Prevents deletion through XSRF
2013-07-25 17:16:56 +02:00
iglocska dde52f124a Initial refactoring of the event view / xml exports
- event view and xml exports all use __fetchEvent now

- unified the permission checks

- same output for event/id.xml and the xml exports
2013-07-18 10:58:10 +02:00
iglocska fc7620bd53 Minor change with shadowattributes
- short was still used on the shadow attribute value field, if the
shadow attribute was a proposal to the event itself and not to an
attribute
2013-07-17 13:25:28 +02:00
iglocska 62d4addb9d Some css changes broke the shadow attributes
- should be fixed
2013-07-17 12:04:57 +02:00
Christophe Vandeplas ca30cf006f Import ThreatConnect attributes into event, see issue #119 2013-07-15 09:10:18 +02:00
Christophe Vandeplas aa0da25383 minor UI glitch in IOC/IDS naming 2013-07-12 12:47:55 +02:00
Christophe Vandeplas 4388d18ba1 UI improvement on private event/attribute 2013-07-12 07:54:58 +02:00
iglocska 3e9a967188 Removal of some references to the old private flag 2013-07-11 17:25:47 +02:00
iglocska 53675fe3a3 Some UI changes and reattached the regexp for the admin validation tool
- org only events have a redish background in the event index

- org only events and attributes have their distribution level marked in
red
2013-07-11 16:38:39 +02:00
iglocska 1b79963ce8 UI changes applied to the actions menu
- The side menu is now fixed / relatively positioned based on the debug
mode, like the header and the footer.
2013-07-04 13:35:04 +02:00
iglocska 3bc787dd3b Closes #131
- Seems like a change removed this functionality since 2.0, fixed
2013-06-27 16:54:27 +02:00
iglocska 93b39eb76d Some UI changes
- Signature / IDS Signature changed to IOC
2013-06-27 12:08:58 +02:00
iglocska 39e99554c9 Views updated to include CSV in the menues
- CSV and also IOC downloads on events are now hidden if the event is
not published
2013-06-26 17:20:56 +02:00
iglocska 776ef3ae07 Changes to export validation, CSV export, Whitelist redesign
- CSV export for individual events, all events, search results
- Whitelists are now preg_matches instead of simple string matches
- whitelist checks are to be applied on almost all exports
(implementation in progress)
- the exception will be the search result exports, if the (to be
implemented) to_ids only checkbox isn't checked
2013-06-26 14:48:25 +02:00
Christophe Vandeplas 136b929801 shows spaces in attribute value. fixes #19 2013-06-19 11:05:34 +02:00
iglocska 441c6c94f4 Addition of the Event History
- uses the logs to generate a list of actions affecting the selected
event and all of its attributes

- view is very minimalistic, not to show anything restricted
2013-06-18 12:27:59 +02:00
iglocska 708156ee49 Some UI changes and partial update to the manual 2013-06-13 16:10:28 +02:00
iglocska fd077e7bd4 Shadow attribute change
- fixed incorrect link to edit shadow attributes and the distribution
checks
2013-06-11 13:51:11 +02:00
Christophe Vandeplas 68c2fd09fe Merge branch 'develop' of https://github.com/MISP/MISP into feature/sync/timestamp
Conflicts:
	app/View/Attributes/index.ctp
	app/View/Events/add.ctp
	app/View/Events/edit.ctp
2013-06-10 23:00:37 +02:00
Iglocska 06ca5ba0cd Further changes to the distribution
- changed to use the new int field
2013-06-10 20:49:31 +02:00
Christophe Vandeplas e0c0e7ccf5 unified links 2013-06-10 17:57:20 +02:00
iglocska 3c23ac3a86 Change to new distribution
- first stage
2013-06-10 17:33:03 +02:00
Christophe Vandeplas 3ed50e2aef improve UI of event index filtering 2013-06-10 17:24:41 +02:00
Christophe Vandeplas 0d66ef931a UI tooltip love 2013-06-06 18:06:22 +02:00
Christophe Vandeplas 38897d9af3 create default admin user automatically 2013-06-04 13:06:57 +02:00
iglocska 0b834464ac Changes to the event view
- reworked the way events are loaded and reloaded to check for
privileges
2013-06-03 17:23:34 +02:00
iglocska 1d8003f4f5 Merge branch 'feature/gui' of https://github.com/MISP/MISP into feature/gui
Conflicts:
	app/View/Events/view.ctp
2013-06-03 16:30:32 +02:00
iglocska 5522578f68 Update to the shadow attributes
- UI changes
- changed the relationship between shadowattributes and events to be
hasMany
2013-06-03 16:25:43 +02:00
Christophe Vandeplas bdc973f9ed alignment of action buttons 2013-06-03 14:44:31 +02:00
Christophe Vandeplas d5c5134691 Display related events in multiple columns. fixes #113 2013-06-03 14:23:15 +02:00
iglocska 3549e0c49d More UI changes 2013-06-03 12:29:07 +02:00
iglocska 7691476fae More UI changes 2013-06-03 10:48:38 +02:00
Christophe Vandeplas 03a9b2bcc2 UI event fixes 2013-06-01 11:05:15 +02:00
Christophe Vandeplas d099ca8e1c hilight row 2013-05-30 16:40:47 +02:00
Christophe Vandeplas 0fa30912a3 mirated first parts of nice GUI proposed by Alexandru of CERT-EU 2013-05-30 11:14:00 +02:00
iglocska 876381d295 Update to the IOC import tool
- Tries to resolve some branching to increase the number of successful
  imports

- Moved to the event view and the import only adds attributes without
  changing the event's data itself

- Visualisation of the original IOC, showing the successes and failures
2013-05-29 13:42:04 +02:00
iglocska 6e9b19ce51 Quick fix to the sanitization
- the double sanitization needed a quick fix until the development branch
  gets merged in the future
2013-05-24 10:29:08 +02:00
Iglocska c4bcf1c077 Fixes #88
- events searchable by uuid
	-> /events/view/<uuid>
2013-04-30 16:55:13 +02:00
Iglocska 2b47fec2a5 Further changes to the export features
- fixed issues with some download exports not being downloaded
- eliminated some code repetition
2013-04-30 11:24:02 +02:00
Andras Iklody 4396cec8ea Integrated ownership, ACL and minor fixes
- Orgs can propose new attributes or changes to existing attributes for
  events that they do not own

- publishing users of the owner organisation can see, accept or discard
  them

- Reworked the access control

- minor fixes
2013-04-25 14:04:08 +02:00
Christophe Vandeplas e9bcacfbc3 fix sanitization in Attributes #96 2013-04-24 15:20:20 +02:00
Christophe Vandeplas 665defe7b1 cleanup crappy sanitization 2013-04-22 15:22:20 +02:00
Christophe Vandeplas 23742c543c rewrote fetching of the related events 2013-04-22 15:04:27 +02:00
Andras Iklody 9a6733acfd Removal of deprecated code
- The flag private is deprecated, removed together with the code that was
  affected by it
2013-04-17 11:13:09 +02:00
Christophe Vandeplas 8d5782125d removed unused CyDefSIG.showowner field. Closes issue #93 2013-04-16 15:29:34 +02:00
iglocska 5d42b81989 First version of an IOC export feature
- Builds basic .ioc file of an event, OR-ing all eligible attributes

- mass export via a zip file to be implemented later
2013-03-26 11:02:01 +01:00
iglocska 8c0a7ad716 Double sanitization fixed 2013-03-19 15:13:07 +01:00
iglocska ef93e61efb Related events
- Implemented on request: related events created by the same organisation are now coloured red
2013-03-19 10:30:32 +01:00
iglocska 91b1787fe8 Change to the location of the add attribute/attachment buttons. Fixes #49 2013-03-18 15:25:32 +01:00
iglocska 32de082c88 New export feature
- To restrict the authentication key from being used by interactive users,
implemented a new export page that uses the uses cake's user
authentication

- the old export features still exist for users with perm_auth enabled
  accounts - renamed to automation

- Exporting the events that found attributes belong to in a search
  attributes result page

- exporting of individual events to file by clicking a link in event view
2013-03-18 11:48:36 +01:00
iglocska d5800206e6 Bug fixes
- issues of admin orgs not being able to edit/delete org events

- owner org removed for org admins

- email only visible from own org to org admins
2013-03-13 15:11:49 +01:00
Andras Iklody 019e976783 Removed the js title bubble for related events
- Removed javascripts based title bubble showing the event info in related
  events / attributes and in the search attribute view.

- Replaced it with values provided by extra cake queries as the delay for
  fetching the info field through a js rest request was annoyingly slow

- some coding standards
2013-03-08 13:16:02 +01:00
Andras Iklody 64f304da48 Tighter checks so users can't edit events of other orgs 2013-03-05 16:17:34 +01:00
Andras Iklody 0f947085cb Reworked the sync / release control
- Fixed issues with the sync
	- Secondary publishes on remote servers failed
	- Introduced new fields in events to stop backward traverse of
	  edit information that lead to low performance and eroneous
	  distribution information updates when more than 2 servers were
	  linked
	- Deletion of an attribute now deletes on remote servers

- Changes to the event ownership
	- Original creator org now noted in the event itself
	- Only original creator org can change distribution
	- Events will show up with the original creator org for users
	  (admins can see both that and the owner of the event on the
	  local instance)
	- Server.organization now used in junction with the connecting
	  user's org and the instance's org (from the bootstrap) to
	  determine distribution flow control and access rights

- Lots of minor changes
2013-02-19 15:37:35 +01:00
Andras Iklody 29295e1380 changes to the admin org access and sanitization
1. Some errors fixed in the way redirects worked for org admins

2. fixed some double sanitization resulting in incorrect characters
displayed in certain fields
2013-01-30 11:49:55 +01:00
Noud de Brouwer a17eaa69ad log & code duplication
$this->Html->image($nonExistingImage)
showed up in tmp/logs/error.log and
the origin this is in 2 Views, so a View Element was created.
2012-12-20 10:33:54 +00:00
Noud de Brouwer 0b6555fa0c log & coding standards
do not logs/error.log if an img does not exist.
and overcome the,
Each PHP statement must be on a line by itself.
2012-12-19 14:28:39 +00:00
Noud de Brouwer 0c1dd9b0ab HTML
make Events/view.ctp valid HTML.
2012-12-19 11:41:02 +00:00
Noud de Brouwer ea9aa8eb3a coding standards
Coding Standards.
2012-12-18 19:25:12 +00:00
Andras Iklody 1ceadab700 Added features from branch analysis_levels
-Analaysis levels setable for events as per milestone item 94
-Password change forced as per milestone item 109
-Added feedback on entered search terms for search attributes
-fixed the authentication issue
-some minor fixes
2012-12-17 15:51:30 +01:00
noud 45cbe60aa7 distribution
show "All" if distribution is All communities in Events/index.ctp and
Events/view.ctp.
2012-12-07 14:01:41 +01:00
Andras Iklody c452027340 changes to the related events mouseover bubble
Removed unneeded headers and changed the address to relative to avoid the
sending of an OPTIONS REST request.
2012-12-06 16:08:21 +01:00
noud b65ca1e31e typo
typo
2012-12-05 15:13:17 +01:00
noud 8a2bc6c6fb coding standards
coding standards tells us "space"."space"
2012-12-05 15:03:44 +01:00
noud 47a57e6b7a coding standards
whitespace police.
2012-12-05 13:26:54 +01:00
noud 6ea26e8ef3 Added bubble when hovering over related events
suppres already named caregorie again.
2012-12-05 13:22:45 +01:00
Andras Iklody db3d9c65c9 Update to the hover effect on related items
Several occurances of links to the same event in the attribute list
caused all instances except the first one to not display any event info
when hovered over. Fixed.
2012-12-05 11:55:01 +01:00
noud f2ccfb60e6 coding standards
coding standards tells us "space"."space"
2012-12-05 11:14:11 +01:00
noud 385b12beba Added bubble when hovering over related events
suppres already named caregorie again.
2012-12-05 10:35:52 +01:00
noud 7e64388e67 Added bubble when hovering over related events
no need to re-include jquery given it's included in
View/Layouts/default.ctp.
2012-12-05 09:05:40 +01:00
noud 4ab744ed76 Added bubble when hovering over related events
make baseurl variable conform bootstrap.
2012-12-05 09:00:35 +01:00
noud 63811bffb6 Added bubble when hovering over related events
make authkey variable conform the authenticated user.
2012-12-05 08:56:58 +01:00
Andras Iklody f2856710de Added bubble when hovering over related events
Hovering over related events will reveal the "info" field of the event
without clicking on it.
2012-12-04 14:22:40 +01:00
noud 2b8af20cf4 attributes delete
oeps, attribute delete inadvertably deleted from view.
2012-11-26 15:07:23 +01:00
noud b2c268845f code standards
respect code standards.
2012-11-19 14:49:38 +01:00
noud c8c58fa1b9 PHP
CakePHP php minimum_version="5.2.8" but lcfirst was introduced in PHP
5.3, so i reverted to 'strtolower(substr('.
2012-11-19 11:02:59 +01:00
noud 1cddb6abe0 distribution
conform latest, having:
- Your organization only
- This server-only
- This Community-only
- Connected communities
- All communities

Push is tested, pull not yet.
2012-11-16 15:25:57 +01:00
noud 5d37e93eb6 code
have the distribution description in one place, just the model.
2012-11-16 11:43:47 +01:00
noud 51145da87a index
some line disapeared, in view as well on attribute level.
Andras Iklody suggested a html non breaking space, that worked.
2012-11-16 10:18:37 +01:00