Commit Graph

105 Commits (787133616424fad6900705f684e1a8608b38cc94)

Author SHA1 Message Date
Christophe Vandeplas 38897d9af3 create default admin user automatically 2013-06-04 13:06:57 +02:00
iglocska 0b834464ac Changes to the event view
- reworked the way events are loaded and reloaded to check for
privileges
2013-06-03 17:23:34 +02:00
iglocska 1d8003f4f5 Merge branch 'feature/gui' of https://github.com/MISP/MISP into feature/gui
Conflicts:
	app/View/Events/view.ctp
2013-06-03 16:30:32 +02:00
iglocska 5522578f68 Update to the shadow attributes
- UI changes
- changed the relationship between shadowattributes and events to be
hasMany
2013-06-03 16:25:43 +02:00
Christophe Vandeplas bdc973f9ed alignment of action buttons 2013-06-03 14:44:31 +02:00
Christophe Vandeplas d5c5134691 Display related events in multiple columns. fixes #113 2013-06-03 14:23:15 +02:00
iglocska 3549e0c49d More UI changes 2013-06-03 12:29:07 +02:00
iglocska 7691476fae More UI changes 2013-06-03 10:48:38 +02:00
Christophe Vandeplas 03a9b2bcc2 UI event fixes 2013-06-01 11:05:15 +02:00
Christophe Vandeplas d099ca8e1c hilight row 2013-05-30 16:40:47 +02:00
Christophe Vandeplas 0fa30912a3 mirated first parts of nice GUI proposed by Alexandru of CERT-EU 2013-05-30 11:14:00 +02:00
iglocska 876381d295 Update to the IOC import tool
- Tries to resolve some branching to increase the number of successful
  imports

- Moved to the event view and the import only adds attributes without
  changing the event's data itself

- Visualisation of the original IOC, showing the successes and failures
2013-05-29 13:42:04 +02:00
Iglocska c4bcf1c077 Fixes #88
- events searchable by uuid
	-> /events/view/<uuid>
2013-04-30 16:55:13 +02:00
Iglocska 2b47fec2a5 Further changes to the export features
- fixed issues with some download exports not being downloaded
- eliminated some code repetition
2013-04-30 11:24:02 +02:00
Andras Iklody 4396cec8ea Integrated ownership, ACL and minor fixes
- Orgs can propose new attributes or changes to existing attributes for
  events that they do not own

- publishing users of the owner organisation can see, accept or discard
  them

- Reworked the access control

- minor fixes
2013-04-25 14:04:08 +02:00
Christophe Vandeplas e9bcacfbc3 fix sanitization in Attributes #96 2013-04-24 15:20:20 +02:00
Christophe Vandeplas 665defe7b1 cleanup crappy sanitization 2013-04-22 15:22:20 +02:00
Christophe Vandeplas 23742c543c rewrote fetching of the related events 2013-04-22 15:04:27 +02:00
Andras Iklody 9a6733acfd Removal of deprecated code
- The flag private is deprecated, removed together with the code that was
  affected by it
2013-04-17 11:13:09 +02:00
Christophe Vandeplas 8d5782125d removed unused CyDefSIG.showowner field. Closes issue #93 2013-04-16 15:29:34 +02:00
iglocska 5d42b81989 First version of an IOC export feature
- Builds basic .ioc file of an event, OR-ing all eligible attributes

- mass export via a zip file to be implemented later
2013-03-26 11:02:01 +01:00
iglocska 8c0a7ad716 Double sanitization fixed 2013-03-19 15:13:07 +01:00
iglocska ef93e61efb Related events
- Implemented on request: related events created by the same organisation are now coloured red
2013-03-19 10:30:32 +01:00
iglocska 91b1787fe8 Change to the location of the add attribute/attachment buttons. Fixes #49 2013-03-18 15:25:32 +01:00
iglocska 32de082c88 New export feature
- To restrict the authentication key from being used by interactive users,
implemented a new export page that uses the uses cake's user
authentication

- the old export features still exist for users with perm_auth enabled
  accounts - renamed to automation

- Exporting the events that found attributes belong to in a search
  attributes result page

- exporting of individual events to file by clicking a link in event view
2013-03-18 11:48:36 +01:00
iglocska d5800206e6 Bug fixes
- issues of admin orgs not being able to edit/delete org events

- owner org removed for org admins

- email only visible from own org to org admins
2013-03-13 15:11:49 +01:00
Andras Iklody 019e976783 Removed the js title bubble for related events
- Removed javascripts based title bubble showing the event info in related
  events / attributes and in the search attribute view.

- Replaced it with values provided by extra cake queries as the delay for
  fetching the info field through a js rest request was annoyingly slow

- some coding standards
2013-03-08 13:16:02 +01:00
Andras Iklody 64f304da48 Tighter checks so users can't edit events of other orgs 2013-03-05 16:17:34 +01:00
Andras Iklody 0f947085cb Reworked the sync / release control
- Fixed issues with the sync
	- Secondary publishes on remote servers failed
	- Introduced new fields in events to stop backward traverse of
	  edit information that lead to low performance and eroneous
	  distribution information updates when more than 2 servers were
	  linked
	- Deletion of an attribute now deletes on remote servers

- Changes to the event ownership
	- Original creator org now noted in the event itself
	- Only original creator org can change distribution
	- Events will show up with the original creator org for users
	  (admins can see both that and the owner of the event on the
	  local instance)
	- Server.organization now used in junction with the connecting
	  user's org and the instance's org (from the bootstrap) to
	  determine distribution flow control and access rights

- Lots of minor changes
2013-02-19 15:37:35 +01:00
Andras Iklody 29295e1380 changes to the admin org access and sanitization
1. Some errors fixed in the way redirects worked for org admins

2. fixed some double sanitization resulting in incorrect characters
displayed in certain fields
2013-01-30 11:49:55 +01:00
Noud de Brouwer a17eaa69ad log & code duplication
$this->Html->image($nonExistingImage)
showed up in tmp/logs/error.log and
the origin this is in 2 Views, so a View Element was created.
2012-12-20 10:33:54 +00:00
Noud de Brouwer 0b6555fa0c log & coding standards
do not logs/error.log if an img does not exist.
and overcome the,
Each PHP statement must be on a line by itself.
2012-12-19 14:28:39 +00:00
Noud de Brouwer 0c1dd9b0ab HTML
make Events/view.ctp valid HTML.
2012-12-19 11:41:02 +00:00
Noud de Brouwer ea9aa8eb3a coding standards
Coding Standards.
2012-12-18 19:25:12 +00:00
Andras Iklody 1ceadab700 Added features from branch analysis_levels
-Analaysis levels setable for events as per milestone item 94
-Password change forced as per milestone item 109
-Added feedback on entered search terms for search attributes
-fixed the authentication issue
-some minor fixes
2012-12-17 15:51:30 +01:00
noud 45cbe60aa7 distribution
show "All" if distribution is All communities in Events/index.ctp and
Events/view.ctp.
2012-12-07 14:01:41 +01:00
Andras Iklody c452027340 changes to the related events mouseover bubble
Removed unneeded headers and changed the address to relative to avoid the
sending of an OPTIONS REST request.
2012-12-06 16:08:21 +01:00
noud b65ca1e31e typo
typo
2012-12-05 15:13:17 +01:00
noud 8a2bc6c6fb coding standards
coding standards tells us "space"."space"
2012-12-05 15:03:44 +01:00
noud 47a57e6b7a coding standards
whitespace police.
2012-12-05 13:26:54 +01:00
noud 6ea26e8ef3 Added bubble when hovering over related events
suppres already named caregorie again.
2012-12-05 13:22:45 +01:00
Andras Iklody db3d9c65c9 Update to the hover effect on related items
Several occurances of links to the same event in the attribute list
caused all instances except the first one to not display any event info
when hovered over. Fixed.
2012-12-05 11:55:01 +01:00
noud f2ccfb60e6 coding standards
coding standards tells us "space"."space"
2012-12-05 11:14:11 +01:00
noud 385b12beba Added bubble when hovering over related events
suppres already named caregorie again.
2012-12-05 10:35:52 +01:00
noud 7e64388e67 Added bubble when hovering over related events
no need to re-include jquery given it's included in
View/Layouts/default.ctp.
2012-12-05 09:05:40 +01:00
noud 4ab744ed76 Added bubble when hovering over related events
make baseurl variable conform bootstrap.
2012-12-05 09:00:35 +01:00
noud 63811bffb6 Added bubble when hovering over related events
make authkey variable conform the authenticated user.
2012-12-05 08:56:58 +01:00
Andras Iklody f2856710de Added bubble when hovering over related events
Hovering over related events will reveal the "info" field of the event
without clicking on it.
2012-12-04 14:22:40 +01:00
noud 2b8af20cf4 attributes delete
oeps, attribute delete inadvertably deleted from view.
2012-11-26 15:07:23 +01:00
noud b2c268845f code standards
respect code standards.
2012-11-19 14:49:38 +01:00