c8ff7bb4b2
new: [adminNotificationBehavior] Added first version of new behavior and associated inboxProcessor
...
This behavior allows to specify on which fields modification site-admins should be notified by receiving a message in their inbox
2022-10-26 17:10:04 +02:00
fd6d3466d7
fix: [authkey] should only be used in a rest context
...
- otherwise some weird authentication snafus can happen
- as reported by SK-CERT
2022-09-19 02:14:57 +02:00
a9eccb3097
fix: [security] X-FRAME-OPTIONS: DENY added to all responses
...
- as reported by SK-CERT
2022-09-19 01:11:18 +02:00
62ca877f0b
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop-unstable
2022-02-08 08:42:25 +01:00
c7b226f844
chg: [flood protection] added cleanup
2022-02-07 02:14:53 +01:00
e6643365d2
new: [flood protection] behaviour added
...
simple expiration system to allow flood protections to be added to any functionality
2022-02-07 02:01:59 +01:00
c186c88d5c
chg: [navigation] Breadcrumb generation is user aware
...
- moved the initialisation of the generation to be invoked from the appcontroller's beforefilter, after the user is loaded into the ACL component
- Only show user setting edits when the user is editing themselves
2022-01-26 14:21:27 +01:00
dd3a1b8a15
chg: [appcontroller] Breadcrumbs and notifications are fetched only if the user is logged in
2022-01-25 11:29:50 +01:00
6321725fa9
new: [notification] Added initial version of the notification system
2022-01-24 15:13:28 +01:00
2e0051401f
chg: [appController] Don't generate nav breadcrumbs in API context
2022-01-20 09:31:51 +01:00
324ac1ce40
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into refactor-metatemplates
2022-01-20 09:00:45 +01:00
204c60f739
fix: [ACL] fixed ACL check on user edit for the admin permission
...
- invalid name used for the lookup (perm_side_admin instead of perm_admin) leading to incorrect downgrading of the permissions
2022-01-12 10:31:06 +01:00
e408f29a05
chg: [appcontroller] minor changes
...
- getRoleAccess now returns array format
- moved setting of view variables behind a rest check, to avoid additional unused actions for API queries
- current user's role access matrix passed to view via "roleAccess"
2021-12-01 14:24:32 +01:00
d2a88b3a18
chg: [Component:Navigation] Breadcrumbs get loaded before rendering to have access to view var
...
So that it can have access to view variables
2021-12-01 08:25:20 +01:00
392faa60e4
new: [ACL] getRoleAccess endpoint added
...
- prints all valid URLs for the current user's role
2021-11-30 00:00:05 +01:00
cc5c750de8
chg: [audit log] change field renamed to changed
...
- change is a reserved keyword
- this way quoting of field names is no longer needed in the cakePHP settings
2021-11-25 00:57:31 +01:00
bacb3dc85e
fix: [API] fixed broken API
...
- don't call functions specifically meant for the UI when in an ACL context
- also fixed breaking issues with the logging
2021-11-24 01:50:55 +01:00
dad310f434
chg: [appcontroller] include user org in loaded user object during authentication
...
- also log username as username rather than name
2021-11-24 01:28:52 +01:00
1f77569344
chg: [auditlog] log api authentication failures / successes
2021-11-17 15:46:32 +01:00
4402e7e074
fix: [theme] drop to default if nothing is configured instead of barfing
2021-10-21 11:26:15 +02:00
d4d5b28341
fix: [theme] selection always defaults to default if no user setting set fixed
2021-10-21 11:06:12 +02:00
d8b2de7460
chg: [settings] fixes
...
- use a JSON file for the config
- stop using cake4 dump/load for the process
- move settings back to the root level
- Research Flyer Carapace level 1
2021-10-21 10:58:07 +02:00
78180fa90f
new: [userSettings] Added complete support of user settings
...
Including support of bookmarks, sidebar behavior and theming
2021-10-18 13:28:26 +02:00
13d546fd2a
chg: [app] Generate side menu for logged-in users only
2021-10-08 16:45:56 +02:00
b4fdc625da
chg: [setting] Support of themes in settings
2021-09-18 11:21:50 +02:00
0d8841a3bf
Merge branch 'ui-navigation' into develop-unstable
2021-09-17 17:12:33 +02:00
9e7bf8638a
chg: [layout] Support of themes - WiP
2021-09-16 15:50:55 +02:00
866f73af88
chg: [app:naviation] Support of breadcrumbs for navigation - WiP
2021-09-09 11:05:44 +02:00
99c857d586
chg: [aclcomponent] Added ACL entry
2021-09-03 09:49:20 +02:00
a14dc2e8fe
chg: [tags] Transformed feature into a pluging - WiP
2021-09-02 11:30:09 +02:00
14c70a092f
new: Decoupled Cerebrate settings from application settings
...
And included an example of setting provider
2021-07-30 15:12:54 +02:00
83161817d5
Merge remote-tracking branch 'origin/develop' into inbox-misp-sync
2021-06-21 08:45:22 +02:00
e1ebbc125a
chg: [inbox:localTool] Usage of localTools in the inbox to process connection requests - WiP
2021-06-17 14:13:10 +02:00
7757bec292
fix: [API] various fixes
2021-06-17 08:54:09 +02:00
ef94ce147c
Merge branch 'main' into inbox
2021-06-01 14:37:29 +02:00
2d4727770c
wip: initial connectors
2021-04-30 23:59:53 +02:00
a5e1e39671
fix: [appcontroller] Validate form for all actions unless index
2021-03-19 11:14:02 +01:00
77fe4e6505
new: [inbox] First version of Inbox system and requestProcessors - WiP
2021-03-15 22:47:13 +01:00
3c2fa086d6
new: [baseurl] added better baseurl handling
...
- set the baseurl via /config/app_local.php
- simple set the baseurl to an absolute path or to a relative path if you with to use a subdirectory without setting a baseurl
- If no baseurl is set above, Cerebrate will also check the CEREBRATE_BASEURL environment variable
2021-02-09 22:10:26 +01:00
7a195aed93
chg: [baseurl] exposed as an easy to reach variable in all views
2021-01-13 14:21:25 +01:00
5f30a8b674
chg: [ACL] rework
...
- moved the menu into the ACL function
- tied ACL function into menubuilding process to remove items the user has no access to - thanks to @JakubOnderka for the inspiration
- tied missing endpoints into the ACL system
- fixed the queryACL function to work with Cerebrate
2020-09-29 13:18:28 +02:00
4fd2c3b548
new: [metaFields] system added
...
- rework of several internal libraries
- append custom fields to objects
- templating system to assist users, using JSON files
- mapped the FIRST directory as a first test
2020-09-28 01:25:07 +02:00
b027007618
new [Authkey] implementation ready
...
- users can have multiple keys
- keys are hashed with bcrypt
- each key can have its own expiration
- each key can have a contextual comment
- authentication via API requests happens with the Authorization header
2020-08-07 21:47:04 +02:00
1ae1e496f2
new: [UI] some refactor and added theming
2020-06-23 14:14:20 +02:00
0c6e88cdee
new: [init] added functions to create a default user
2020-06-22 17:45:00 +02:00
44c60942c0
chg: [restructure] the application
...
- move the app dir's contents to the source
- update composer for easier installation
2020-06-22 14:28:17 +02:00
Sami Mokaddem