04322b24df
fix: [user editing] fixed for roles <= community admin, fixes #198
2024-12-06 07:25:02 +01:00
4f1835dc4c
Merge branch 'develop'
2024-11-28 21:32:19 +01:00
50b65021dc
Merge branch 'main' into develop
2024-11-28 21:32:09 +01:00
55695fc09b
Merge branch 'main' of github.com:cerebrate-project/cerebrate
2024-11-28 21:32:00 +01:00
0c320f7d9c
Merge branch 'develop'
2024-11-28 21:31:48 +01:00
ffd6c50294
Merge branch 'main' into develop
2024-11-28 21:31:35 +01:00
9c54a4842f
chg: [version] bump
2024-11-28 21:30:14 +01:00
1572681307
fix: [authkeys] better permission / listing handling
...
- allow group admins to manage api keys of their group
- when adding an authkey from the user view, don't list every user in the dropdown, focus on the selected user
2024-11-28 21:28:24 +01:00
0ed3bef000
chg: [internal] authkey adding, more elegant solution
2024-11-28 20:44:51 +01:00
cfceaf0fb7
fix: [authkeys] don't barf if no valid roles exist
2024-11-28 20:42:27 +01:00
04b640c8b6
fix: [diagnostics] allow for certain settings to be empty, fixes #176
...
- via the empty => true key
2024-11-28 18:00:13 +01:00
cce4115418
fix: [error handling] better error handling for bookmarks, fixes #188
...
- show why something failed
- actually fail if a field is missing for bookmarks
2024-11-28 17:47:43 +01:00
d799214a41
fix: [error] when deleting a role that had users attached to it was cryptic, fixes #180
2024-11-28 17:13:32 +01:00
1c8bcc045e
fix: [security] Group admin ACL
...
- group admin can inject user into organisation not managed by themselves
- as reported by Jeroen Pinoy (@wachizungu)
2024-11-28 16:56:51 +01:00
da4bd943b7
fix: [typo] in the authkeyscontroller
...
- lead to users not being able to generate authkeys
2024-11-28 16:46:45 +01:00
467ec29f54
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop
2024-11-28 09:37:30 +01:00
07f67fe9ea
fix: [cleanup] ACL component
...
- duplicate check removed
2024-11-28 09:37:06 +01:00
8e87dd8b28
Merge pull request #190 from Wachizungu/add-new-roles-to-default-admin-role
...
fix: default admin role doesn't have group admin and meta field edito…
2024-11-28 09:35:36 +01:00
39e9fb4a76
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop
2024-11-28 09:25:47 +01:00
0131422ab8
fix: [security] Tightening of the role assignment permissions
...
- If a decoupled perm_admin role was configured on the system, this could be assigned by low privilege administrators, leading to privilege escalation
- This fix moves the responsibility of the check to the ACL component rather than the controller
- As reported by Jeroen Pinoy (@wachizungu)
2024-11-28 09:17:24 +01:00
be290b6f10
Merge pull request #191 from Wachizungu/revert-debug-setting-value-type
...
fix: migrations not working on install due to debug mode not being bo…
2024-11-23 20:48:13 +01:00
041028e04c
fix: migrations not working on install due to debug mode not being boolean
2024-11-23 20:27:00 +01:00
ed592c57c7
fix: default admin role doesn't have group admin and meta field editor permissions
2024-11-23 20:08:41 +01:00
8d953cd848
Merge pull request #182 from Wachizungu/fix-community-admin-role-add
...
fix: correctly set perm_community_admin value. fix #179
2024-11-23 09:54:57 +01:00
6fcf5d0b02
Merge pull request #183 from Wachizungu/fix-debug-setting-warnings
...
fix: use numeric values within range for debug level setting
2024-11-23 09:54:30 +01:00
f7f9392cfe
Merge pull request #184 from Wachizungu/fix-proxy-diagnostics-severity-level
...
fix: Set proxy settings diagonistics severity level to info. fix #176
2024-11-23 09:54:13 +01:00
b8ff31a906
Merge pull request #187 from Wachizungu/fix-security-allowed-bookmark-domains-read-config
...
fix: typo in read security allowed bookmark domains config
2024-11-23 09:53:57 +01:00
1702b84fe8
Merge pull request #189 from Wachizungu/chg-load-current-user-settings-view-in-case-id-unset
...
fix: users settings view throws internal server error when accessed w…
2024-11-23 09:53:24 +01:00
a1020bc42b
fix: users settings view throws internal server error when accessed without user id
2024-11-22 23:48:52 +01:00
850d559cef
fix: typo in read security allowed bookmark domains config
2024-11-22 22:40:25 +01:00
55cac2e2e6
new: [security] added functionality to tighten bookmark creation rules
...
- site admins can now limit the baseurls of the provided bookmark URLs to a list of values via the server settings
2024-11-22 12:48:37 +01:00
ab331dcfb9
fix: [crud] fixed the broken non ajax messages just introduced in the previous commit
...
- can't have my cake and eat it too
2024-11-22 12:47:16 +01:00
ac33e90f0c
fix: [message handling] of error messages
...
- correctly handle beforeSave / afterSave failures in ajax contexts
- until now it was just silently failing giving cryptic messages to the user
2024-11-22 12:40:21 +01:00
b45cc8ae22
fix: Set proxy settings diagonistics severity level to info. fix #176
2024-11-16 15:27:10 +01:00
54e4fca637
fix: use numeric values within range for debug level setting
2024-11-16 14:57:16 +01:00
6813013379
fix: correctly set perm_community_admin value. fix #179
2024-11-16 11:23:04 +01:00
9b92f86627
Merge pull request #178 from Wachizungu/fix-typo
...
fix: fix typo in individuals description
2024-11-10 13:01:21 +01:00
a63bb216dd
Merge pull request #177 from Wachizungu/fix-brood-add-description
...
fix: Correct description on add brood view
2024-11-10 13:01:03 +01:00
7d08623ca8
fix: fix typo in individuals description
2024-11-10 12:16:38 +01:00
9e69bc7239
fix: Correct description on add brood view
2024-11-10 12:11:22 +01:00
e8f5165b11
Merge branch 'develop'
2024-10-16 10:51:44 +02:00
5d0b7715db
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop
2024-10-16 10:51:26 +02:00
2eb6b1ae77
fix: [pgp] key status check fixed for certain edge cases
2024-10-16 10:50:50 +02:00
a05f28147f
Chg: Update VERSION.json
...
Urgency
2024-10-14 15:48:26 +02:00
af0d56d56e
Merge branch 'develop'
2024-09-25 15:22:00 +02:00
55ded175a9
chg: [docker:readme] Updated PHP version
2024-09-25 15:19:50 +02:00
0c78028c6a
new: [ui] Added country flag in some places
...
- Currently in:
- /organisations/[index/view]
- /users/[index/view]
2024-09-25 10:59:09 +02:00
aae584f0b7
chg: [users:add] Update the permission limitation for org permission on /users/add
2024-09-24 16:03:35 +02:00
888661a172
fix: [permissionLimitiation:getListOfLimitations] Correctly show the correct amount of limitation
...
- Correctly get the number of org permission if the user is an org_group_manager
- and one of the org he/she manages doesn't have a user
2024-09-24 16:00:26 +02:00
9ca5af34a3
fix: [users:index_filtering] Added ACL entries for filtering modal
2024-09-24 14:50:57 +02:00
iglocska