Commit Graph

455 Commits (91f96427db16e1749ddaa688d2ff17341635cca1)

Author SHA1 Message Date
noud 91f96427db RBAC
//$user =
ClassRegistry::init('User')->findById($this->Auth->user('id'));
$this->loadModel('User');
$user = $this->User->findById($this->Auth->user('id'));
2012-11-08 14:36:27 +01:00
noud e648817e3d RBAC
should now respect Manage, so also edit, own and org events
in the db-update procedure as well.
‏
2012-11-08 14:19:50 +01:00
noud a2bc237bcd RBAC
should now respect Manage, so also edit, own and org events.‏
2012-11-08 14:09:52 +01:00
noud f7c5127da2 RBAC
change the “Requested Level of User Access” items
conform "draft of Terms-ofUse and Joining Instruction".‏
2012-11-08 10:31:50 +01:00
noud d66b4031cd SQL
add Servers.organization.
2012-11-07 16:13:44 +01:00
noud 12ebfafe16 RBAC
role only add could still publish her own events,
this should be not possible anymore.
2012-11-07 16:02:36 +01:00
noud 2785512268 distribution
removed No push leftovers as a distribution.
2012-11-07 15:41:50 +01:00
noud 2164738834 SQL
pull-up all changes to the db model,
so MYSQL.txt has all needed for a clean start db.
2012-11-05 13:40:18 +01:00
noud 36292259aa contact reporter
Submit to org button in the contact reporter view – changed it
to just submit, having the tickbox to contact a person only + the submit
to org button seems a bit confusing.
2012-11-05 13:28:43 +01:00
noud f66b199f26 distribution
removed No push as a distribution.
2012-11-05 13:05:31 +01:00
noud 3e46eaa5ea logout
moved logout from footer right to Global Actions.
2012-11-05 12:55:14 +01:00
noud d55f226275 distribution
now attributes do work same for pull like push.
2012-11-05 12:49:51 +01:00
noud 29c966810e distribution
let pull behave same way as a push in regard to distribution.
2012-11-05 10:24:50 +01:00
noud d17d5b6b8a distribution
do not push Community nor No push conform private.
2012-11-02 13:37:33 +01:00
noud ed1d5bf063 Search attributes
disallow invalid combinations of types and
categories which would always throw 0 results.
2012-11-02 11:51:10 +01:00
noud 60910ae5db RBAC
name all Role i.s.o. Group.
2012-10-31 17:10:59 +01:00
noud 49a21bf6a5 version
show version in footer and only when logged in.
2012-10-31 16:52:27 +01:00
noud 2b478605a5 Flags
correct from 50*50 to 48*48, so it's an icon size.
2012-10-31 15:54:15 +01:00
noud 6495787023 Audit log
Following events are now being logged: 
1. Adding a new user.
2. Deleting a user.
2012-10-31 15:34:43 +01:00
noud 1c3ca8909b Users
invited by filled.
2012-10-31 10:00:01 +01:00
noud e0a18896e0 Audit log
Search logs allows for searching for “publish” as Action. Publish is
saved in the logs as an edit with the change being publish () => (1).
Now, edit (so unpublish) is still edit and publish is action.
2012-10-31 09:03:05 +01:00
noud 582dbb0f7b Audit log
Search logs and paging now works as expected (conform search
attributes).
2012-10-31 08:16:37 +01:00
noud 49cf9400aa NIDS
Unpublished events with an attribute flagged for IDS signature will
create an IDS signature (should be published only).
2012-10-30 16:03:58 +01:00
noud c40ca77aa2 whitelist
menu in views.
2012-10-30 15:46:32 +01:00
noud 71179a946f Users
name Delete User on button i.s.o. Delete.
2012-10-30 15:32:27 +01:00
noud cbadc469c5 Users
inactive Delete during edit of My Profile.
2012-10-30 15:30:08 +01:00
noud f111a5e915 Users
inactive Delete User in My Profile.
2012-10-30 15:23:24 +01:00
noud d86a0b0639 Audit log
paging now works.
2012-10-30 15:17:13 +01:00
noud f3066ddbf8 minor
cleanup of groups, logs and whitelists views.
2012-10-30 15:01:59 +01:00
noud 2e872430f6 ExtJs
does not show on production.
this is the ExtJs not being there?
or php (>5.2.8) not build without --disable-json.
2012-10-30 14:15:07 +01:00
noud 099dd8398f distribution
border="1"-testleftover removed.
2012-10-30 13:19:34 +01:00
noud ed56d7c29c distribution
if distribution is All, so not displayed in an index nor in attributes
per event, there is missing a line-part in IE.
Did add 1 space for All, this will maybe display the line-part again.
2012-10-30 13:16:46 +01:00
noud f82c3f5f0c dropdowns
let the risk dropdown in event add and edit behave like the other
dropdowns.
2012-10-30 12:54:04 +01:00
noud 8d986601b9 dropdowns
no space in edit Attribute categories dropdown.
2012-10-30 11:12:25 +01:00
noud a19571fed4 Internationalisation
just small __() for translation lateron.
2012-10-30 10:18:11 +01:00
noud 2b24b36639 (internationalization)
setFlash using __(), so transletable lateron.
2012-10-30 09:13:35 +01:00
noud 8d4d42be84 SQL
update of MYSQL.servers.sql,
not using organization field.
2012-10-29 16:51:14 +01:00
noud d043d759d5 install.
variable cydefsig home dir.
2012-10-29 16:49:53 +01:00
noud 39abe9e589 Distribution
distribution changes conform func.spec.
2012-10-29 16:49:04 +01:00
noud bf6f86c5aa RBAC
We have a rule(?), if so:
$isAclAdd || $event['Event']['user_id'] == $me['id'].
This rule, i "have add right OR the event was and is already mine".
if that's correct, that was forgotten in the actions_menu.ctp.
2012-10-26 10:34:24 +02:00
noud f56cb25bed Merge branch 'master' into develop 2012-10-25 15:23:22 +02:00
noud 05085533de blackhole
full out-commented.
2012-10-25 15:16:19 +02:00
noud f296a9381e RBAC
real inactive buttons.
2012-10-25 15:00:43 +02:00
Andrzej Dereszowski a4eca35c0e Fixed lost JS helper in EventsController 2012-10-25 11:47:04 +02:00
noud 8bc1b767ef GFI Sandbox
Replace Windows specific info in a $string with environment variables en
registry keys.
2012-10-25 10:14:40 +02:00
noud fa86316747 blackhole
revert the commit, this screws CSRF
(thanks to Christophe for noticing)
2012-10-24 17:16:12 +02:00
noud 3c02cccf30 dropdowns
undo better optgroup support in dropdown in Attribute::add()
and just remove the not usable empty category.
2012-10-24 11:38:29 +02:00
noud 944cfb1348 dropdowns
better optgroup support in dropdown in Attribute::add().
2012-10-24 11:22:18 +02:00
noud cfe6535f97 distribution
better descriptive tooltip text.
2012-10-24 11:20:36 +02:00
noud 0232148631 dropdowns
better optgroup support in dropdowns where 'ALL' or '' is used
in Search Attributes and Search Logs.
2012-10-24 10:42:32 +02:00