Commit Graph

11 Commits (main)

Author SHA1 Message Date
Sami Mokaddem 487670e522
chg: [authkeys:add] Select logged-in user by default 2023-02-23 14:57:58 +01:00
Sami Mokaddem 7ccf925247
security: [authkey:add] Restrict creation of API keys for users in the same org and for other org_admins 2023-02-23 14:57:42 +01:00
iglocska c005cb7f66
fix: [error code] adding an authkey for a user you are not authorised to modify resulted in a 404 instead of a 405 2022-02-20 14:56:21 +01:00
iglocska d488f01051
fix: [authkey] add fixed
- incorrectly potentially filter out valid options when adding a key by a regular user
2022-01-19 14:39:03 +01:00
iglocska 6d13d4aba0
fix: [authkeys] tighten requirements to add authkeys for other org admins
- site admin: can add to all
- org admin: can add to all in org, except site admin
- everyone else: can add to self only
2022-01-17 17:16:03 +01:00
iglocska 22e4a90af0
chg: [ACL] tightened ACL for several controllers
- org admins now have access to new functionalities, added ACL for them
- Affected controllers:
  - Authkeys, encryptionkeys, users, sharinggroups
- sets defaults/restricts access accordingly
2021-11-24 01:32:05 +01:00
mokaddem b3c25f0cae new: [instance:search_all] Early work on search all feature 2021-09-10 11:55:54 +02:00
mokaddem 691032551b chg: Added support of displayOnSuccess, non-dismissable modals and some
house cleaning
2021-01-14 11:33:51 +01:00
mokaddem 974d3197e8 chg: [controllers] Bug fixes and usage of UI factory 2021-01-11 16:28:07 +01:00
iglocska b027007618
new [Authkey] implementation ready
- users can have multiple keys
- keys are hashed with bcrypt
- each key can have its own expiration
- each key can have a contextual comment

- authentication via API requests happens with the Authorization header
2020-08-07 21:47:04 +02:00
iglocska 44c60942c0
chg: [restructure] the application
- move the app dir's contents to the source
- update composer for easier installation
2020-06-22 14:28:17 +02:00