Commit Graph

373 Commits (2274fff424475a4e503480d6d357eed34c79ef6d)

Author SHA1 Message Date
Sami Mokaddem 42a5bd03c6
fix: [individual:validation] Enforce email format to be a valid email address 2023-12-12 09:13:02 +01:00
Sami Mokaddem 96e4aceb28
fix: [behavior:notifyAdmins] Fixed typo in date serialization 2023-12-12 09:02:43 +01:00
Sami Mokaddem 338386729f
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2023-11-16 09:04:37 +01:00
Sami Mokaddem 46bafa045f
chg: [crud:index] Include all meta-fields regardless of user's preference when in REST context 2023-11-16 09:02:40 +01:00
iglocska 0d7b73cafe
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2023-11-03 15:46:43 +01:00
iglocska e192c7844b
new: [MISP connector] sync updated to properly support sharing group exchanges 2023-11-03 15:46:20 +01:00
Sami Mokaddem f0ba0d8316
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2023-11-02 08:10:01 +01:00
Sami Mokaddem 63593cfd56
new: [CRUD:index] Allow exporting data into csv
- Added CSVConverter tool and CSV server request detector
2023-11-02 08:08:06 +01:00
iglocska 9305e7ceea
chg: [wip] sharing group rework / MISP connector improvements 2023-10-31 14:54:08 +01:00
iglocska d23e393a9a
fix: [topology] various fixes 2023-10-05 12:47:18 +02:00
iglocska b01a3bf83e
new: [topology UI] added 2023-10-05 11:05:20 +02:00
iglocska e03a037511
fix: [internal] fixed the function checking if a user belongs to the current User's managed org group 2023-09-13 07:06:31 +02:00
Sami Mokaddem b2df8192f7
fix: [OrgGroups:checkIfGroupAdmin] Consider site_admins as group admin 2023-09-12 14:31:03 +02:00
iglocska 1a20eaace9
fix: [strict typing] Made Sami's frankenstein setup happy 2023-09-12 14:25:16 +02:00
iglocska 1d9b54348a
fix: [temp] ACL function built up 2023-09-12 14:17:11 +02:00
iglocska 69b653dd59
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2023-09-12 09:27:57 +02:00
iglocska 16a4a1cde5
new: [org Groups] added
- Org Groups allow user co-management of sub communities
  - Create an org group with a set of organisations
  - assign administrators to an org group
  - org group admins can modify users of the group
2023-09-12 09:26:07 +02:00
Sami Mokaddem 8b4b47775c
chg: [alignments:acl] Reflected ACL logic from individuals to alignments 2023-09-08 09:11:52 +02:00
Sami Mokaddem 367012af36
fix: [individual:edit] Select individuals based on their id and not their user_id 2023-09-07 16:43:30 +02:00
iglocska 52e8a5c6a6
new: [enumerations] added enumerations system
- for string entry fields, simply add lists of values to convert the text entry for values
- helps with maintaining accurate lists
- currently the fields that are valid targets are organisations.nationality, organisations.sector, organisations.type
2023-05-26 16:13:52 +02:00
iglocska 41749ae5a8
fix: [users] added the country information to the index / view 2023-05-25 16:22:49 +02:00
Sami Mokaddem 5f1c99cd53
fix: [security] blind SQL injection in searchAll
- As reported by Zigrin Security
2023-03-25 09:23:45 +01:00
Sami Mokaddem 47bebe5b68
chg: [metaTemplate:update] Gracefully handle case when template on disk is not readable 2023-03-13 11:37:58 +01:00
Sami Mokaddem 6fc568e80e
new: [metaTemplateNameDirectory] Added index to see the known template and their associated saved meta-templates 2023-02-27 12:16:36 +01:00
Sami Mokaddem 26c038b25b
chg: [settings:cerebrate] Improved check before saving debug level 2023-02-27 11:12:54 +01:00
Sami Mokaddem 59f8608d50
new: [user:permissionLimitation] Added current permission status while in `add` or `edit` context
Also moved the notification key from meta-fields to meta-template-fields
2023-02-24 15:22:18 +01:00
Sami Mokaddem a427686388
chg: [user:permissionRestriction] Move check from beforeSave to ApplicationRule 2023-02-24 15:02:08 +01:00
Sami Mokaddem 0833a8c0e4
fix: [individual:getValidToEdit] Restricted ACL to prevent one org_admin to edit another from the same org 2023-02-24 11:18:48 +01:00
Sami Mokaddem 0850c92e89
chg: [users:index] Added setting to allow the deletion of users
Fix #119
2023-02-16 15:07:06 +01:00
Sami Mokaddem adad45baf6
chg: [metaTemplate:updateStrategyDelete] Restored strategy to update a template and delete conflicting metafields 2023-02-16 13:51:36 +01:00
Sami Mokaddem 97a151aff5
new: [metaTemplate:metaFieldMigration] Added support of force migrate
Remove conflicting meta-fields and migrate non-conflicting ones
2023-02-16 13:35:38 +01:00
Sami Mokaddem 27673b54c9
chg: [metaTemplate:migrateMetaField] Ignore metafield with empty value 2023-02-16 09:32:27 +01:00
Sami Mokaddem 20eebd097d
new: [meta-template] Improvement of the update system
- Changed default update strategy from `create_new` to `update_existing`
- Added mechanism to automatically migrate meta-fields to newest template
- Improved validation and conflict detection strategies
- Fixed various UI bugs and improved QoL
2023-02-14 14:42:35 +01:00
Sami Mokaddem 3fcb58c081
chg: [brood:queryIndex] Added support of pagination and filtering 2023-02-13 15:39:25 +01:00
Sami Mokaddem aa9225ba90
fix: [metaFields] Fixed typo in function 2023-02-13 15:16:10 +01:00
Sami Mokaddem 0ac81af82a
fix: [metaTemplateDirectory:create] Added gracefully handle uniqueness 2023-02-13 15:14:43 +01:00
Sami Mokaddem 25e63b710a
fix: [user:rearrangeForAPI] Fixed support of metafields 2023-02-13 15:13:33 +01:00
Sami Mokaddem 7cda322223
fix: [users:view] Temporary measure to gracefully catch connection issue with keycloak 2023-01-18 15:47:59 +01:00
Sami Mokaddem 79a97efa70
Merge branch 'chg-sync-improvements' into develop-unstable 2023-01-18 15:40:54 +01:00
Sami Mokaddem 9ae446bb5d
fix: [behavior:authKeycloak] Correctly URLEncode username 2023-01-17 09:25:43 +01:00
Sami Mokaddem 025dcd9054
chg: [alignment] Added validation rule to avoid duplicates 2023-01-17 09:24:36 +01:00
Sami Mokaddem d9df6ed4c3
fix: [permissionLimitations] Prevent error for org without users 2023-01-17 09:23:24 +01:00
iglocska 13bb031167
fix: [keycloak status] - handle gracefully if user not found in KC
- As reported by Matúš Mikuláš, Adam Gajdošík, Milan Pikula of SK-CERT
2023-01-03 15:41:09 +01:00
iglocska a5eb016fc4
fix: [security] disallow multiple individuals with the same e-mail address
- As reported by Matúš Mikuláš, Adam Gajdošík, Milan Pikula of SK-CERT
2023-01-03 15:30:26 +01:00
iglocska e0f92aa8e0
fix: [validation] Tightened the validation rules for users to avoid 500 errors when the requirements are not met
- ensure that username is unique
- (optional) ensure that individual->user assignment is unique
- (optional) ensure that usernames are e-mail addresses

- As reported by Matúš Mikuláš, Adam Gajdošík, Milan Pikula of SK-CERT
2023-01-03 15:03:06 +01:00
iglocska da2f904554
fix: [security] reworked the Individual handling of user creations / modifications
- creating a new user with the e-mail address of an already existing individual should NOT overwrite the first/last name fields
- it merely connects the individual to the new user

- disallow changing the individual behind an existing user altogether
- allow capturing individuals without updates

- As reported by Matúš Mikuláš, Adam Gajdošík, Milan Pikula of SK-CERT
2022-12-23 16:47:44 +01:00
iglocska 256bfa8702
fix: [users] handle saving of a user without KC 2022-12-16 15:32:29 +01:00
iglocska d4c827c662
fix: [kc] attribute update fixed 2022-12-14 06:46:42 +01:00
iglocska 675cac8944
new: [custom attribute saving] wip 2022-12-14 06:22:04 +01:00
Sami Mokaddem 35a395c68c
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2022-12-13 15:45:44 +01:00