7f92e6401d
Merge remote-tracking branch 'origin/cli-modification-summary' into develop
2022-11-14 12:37:34 +01:00
7940eb065f
new: [command] Summary tool to collect changes done by nationalities
...
Currently supporting individual, organisation and user
2022-11-14 12:36:36 +01:00
f3023eb82c
fix: [individual edit] permission check fix
2022-11-14 11:37:58 +01:00
7d6696e079
new: [metaFields] Adding support of sane_default + improving form & crud - WiP
2022-11-14 09:04:35 +01:00
5c02f1c6a4
chg: [cleanup] of the default role setting for keycloak
...
- not used in any sensible way anymore
2022-11-13 11:18:54 +01:00
260e1d30a1
new: [individuals] rework
...
- allow modifications for org admins of individuals associated to their users
- unless they're site admins
- add user information to the individual index to bring clarity to the individual vs users confusion
- rework of the user form field object
2022-11-13 11:09:34 +01:00
ab5cee58ad
fix: [crud] speculative fix for notice error on metatemplates being accessed that aren't loaded
2022-11-11 15:30:55 +01:00
6d41622129
new: [user deletion] tied into KeyCloak
...
- remove user from KC when possible
- proceed for local users
2022-11-11 15:10:04 +01:00
f6f94983e4
fix: [users] several fixes
...
- User enrollment in KC moved to the aftersave (we consider cerebrate to be authoritative)
- adhere to restriction parameters in deletion
2022-11-11 15:08:56 +01:00
c2bff49185
fix: [beforesave] hook removed on get requests
2022-11-11 15:08:23 +01:00
f4b33d1852
fix: [keycloak sync] not needed on user index
...
- was a test that was left in
2022-11-11 10:07:35 +01:00
2a06b3101e
chg: [version] bump
2022-11-09 14:15:06 +01:00
99febe19db
fix: [keycloak] re-enabled the getUser function, removed the placeholder forced user fetch
2022-11-09 14:10:54 +01:00
b1f09dc97e
new: [permission limitations] subsystem added
...
- add limitations for users with given meta fields
- x number / org and y number / globally
- add comments to the limitations
- enforced on user creation/modification
2022-11-09 14:09:27 +01:00
9d2c152a4e
chg: [bootstrap helper] added warning/info/danger fields
2022-11-09 14:03:16 +01:00
16a3826cef
chg: [encryption keys] rearranged for the API
2022-11-09 13:59:39 +01:00
4ec052a2ac
chg: [soacialauth] listener updated to not save the user
...
- it wasn't making any changes anyway, but triggering a slow process
2022-11-09 13:58:39 +01:00
10ce8beb30
chg: [CRUD] component - only try to unlink MetaFields if it's actually loaded
2022-11-09 13:58:02 +01:00
7675e27e90
chg: [user index] API refactored
2022-11-04 09:59:48 +01:00
003053f13d
new: [API rearrange] added a simplifier for commonly used objects
...
- let's only return the subset of the data required to identify and retrieve the related data
2022-11-04 09:58:55 +01:00
540fd63423
fix: [API] cleaned up the individual API
2022-11-04 09:33:39 +01:00
7504bfab10
fix: [API] rearrange component - handle collections correctly
...
- return a new collection with the individual values transferred to it after changes
- avoids some weird quirks with unsetting related Objects not taking effect
2022-11-04 09:31:46 +01:00
73ad04906a
fix: [typo] capitalisation mistake blocking org edits
2022-11-02 12:11:56 +01:00
11510ea28f
new: [individual] editing enabled for org admins
...
- requires that a user exist for the given individual
2022-10-31 14:42:58 +01:00
8dbbb21dff
chg: [users] add metafields behaviour
2022-10-31 13:38:31 +01:00
5ec0471cce
chg: [keycloak mapper] also pushes default mappings if they don't exist
2022-10-31 13:36:53 +01:00
ce6575cfb6
chg: [User] Entity - added rearrangeForAPI() to rearrange meta fields
2022-10-31 13:26:44 +01:00
2a31e39762
new: [keycloak] automatically set mappings
2022-10-31 13:26:12 +01:00
3bf52c701f
chg: [keycloak] sync script updated
2022-10-31 11:32:15 +01:00
2f4b6ed2ff
chg: [keycloak] integration rework
...
- switch to the use of attributes
- several minor fixes
2022-10-31 11:31:38 +01:00
03bd4aba30
new: [genericElement:group_table_action] Added support of `show # element` in the table
2022-10-28 09:13:15 +02:00
351b90d843
fix: [helper:boostrap] Make sure all properties are passed to the button component
2022-10-28 09:11:21 +02:00
0db625ce45
chg: [inbox:index] Added filtering on `created` time
2022-10-27 15:57:35 +02:00
aeda393bba
chg: [component:CRUD] Improved filtering to support form type based on database column type
2022-10-27 15:56:39 +02:00
e1499fb705
chg: [inbox:index] Added quick filter on scope
2022-10-27 11:22:55 +02:00
dde7bbe75f
chg: [behavior:notifyAdmin] Small refactor to better handle deletions
2022-10-27 11:07:21 +02:00
225913f9c6
new: [organisation] Added `notifyAdmin` behavior.
...
Might be removed later on if needed
2022-10-27 10:14:57 +02:00
d0119b2dba
new: [user] Added `notifyAdmin` behavior
2022-10-27 10:14:09 +02:00
ee5adaf971
chg: [behavior:adminNotification] Added support of watched fields and improved metafield integration
2022-10-27 10:12:06 +02:00
c8ff7bb4b2
new: [adminNotificationBehavior] Added first version of new behavior and associated inboxProcessor
...
This behavior allows to specify on which fields modification site-admins should be notified by receiving a message in their inbox
2022-10-26 17:10:04 +02:00
9c41fd548f
fix: [auth] added keycloak logout
2022-10-25 15:08:41 +02:00
3d5508055a
chg: [inbox:index] Allow filtering index by user.id and user.name
2022-10-25 14:50:39 +02:00
eb6dec8b64
fix: [component:CRUD] Default custom contextual filters do not override search parameters anymore
2022-10-25 14:50:11 +02:00
00c1ae616f
new: [inboxes] Added `severity` level and `message` and removed `description` column
2022-10-25 14:38:16 +02:00
9a8372be12
fix: [return type] validation removed
2022-10-25 11:01:23 +02:00
84537c52f9
new: [user enrollment] send keycloak welcome email to users when enrolled
2022-10-25 10:57:18 +02:00
e98290fcba
chg: [helper:bootstrap] Added support of icon in confirm modal button
2022-10-25 10:30:11 +02:00
6d40968f24
chg: [appTable] Set string format of FrozenTime to ISO 8601-like by default
2022-10-25 10:27:58 +02:00
8d7e2b0df2
chg: [inboxes:UI] Renamed `request` into `message`
2022-10-25 10:26:03 +02:00
726dab255e
chg: [inbox:index] Changed quick filter to show `my notification` by default
2022-10-25 10:24:01 +02:00
745340adff
fix: [component:CRUD] Only show metafields filters wjen the model has the behavior
2022-10-25 10:23:11 +02:00
b555aed178
chg: [auditLog:entity] unset useless noise from user-settings
2022-10-21 16:06:09 +02:00
fc0920c7c3
chg: [component:APIRearrange] Rearrange for all iterators
2022-10-21 15:56:53 +02:00
d1d88391e1
fix: [auditlogs:index] Typo preventing showing the `changed` field
2022-10-21 15:55:31 +02:00
41a241cada
new: [pgp] library ported from MISP
...
- added proper view elements for encryption keys
- added key information extraction
2022-10-21 15:25:52 +02:00
ddfc83af6f
chg: [navigation:socialProvider] Improved UI for SSO profile management
2022-10-21 14:14:38 +02:00
0f27435251
fix: [metaTemplates] Correctly show update message
2022-10-21 14:07:41 +02:00
455daba4d4
fix: [navigation:meta-template] Correctly show badge for new templates
2022-10-21 14:06:46 +02:00
a091edbf22
fix: [user:beforeSave] Only call the user-update callback if the user is not new
2022-10-21 09:00:49 +02:00
c65978f8f2
fix: [behavior:authKeycloak] Correctly check if the user was saved
2022-10-21 08:59:36 +02:00
96041cc71a
chg: [genericIndex:select_visible_columns] Show meta-template versions
2022-09-29 17:54:58 +02:00
21403995e3
new: [user:edit] Added keycloak updates when a user gets modified
2022-09-21 10:11:09 +02:00
37094e0abb
fix: [user:validation] Allow user edition when `username` is not set
2022-09-21 10:10:02 +02:00
80277e4bdf
chg: [command:keycloakSync] Make sure User model is loaded
2022-09-21 10:09:12 +02:00
2c87b1e500
fix: [authKeycloakBehavior] Added missing association preventing user to log via keycloak
2022-09-21 10:07:51 +02:00
69fee02498
fix: [authKeycloakBehavior] Re-indexing array preventing roles to be parsed by keycloak
2022-09-21 10:06:33 +02:00
efe917c824
fix: [authKeycloakBehavior] Typo preventing roles to be saved
2022-09-21 10:05:55 +02:00
8d26be28a2
chg: [auditlogs:index] Reverse sort by ID
2022-09-20 15:31:42 +02:00
760badd268
fix: [alignments] missing contains added
2022-09-19 02:17:36 +02:00
fd6d3466d7
fix: [authkey] should only be used in a rest context
...
- otherwise some weird authentication snafus can happen
- as reported by SK-CERT
2022-09-19 02:14:57 +02:00
4c0c6ef4ac
fix: [counter graphs] fixed to disallow invalid interval entries
...
- as reported by SK-CERT
2022-09-19 01:46:57 +02:00
5e0ab5cc38
new: [users] username validation added
...
- >5 && <50 in length required
- trim username to test to avoid whitespace names
- as reported by SK-CERT
2022-09-19 01:22:53 +02:00
9a50a5693e
fix: [users] added uniqueness to usernames
...
- added upgrade script with removal of duplicate usernames
- added unique index to username field
- massaging the usernames before insertion (trim + lowercasing)
- As reported by SK-CERT
2022-09-19 01:12:14 +02:00
a9eccb3097
fix: [security] X-FRAME-OPTIONS: DENY added to all responses
...
- as reported by SK-CERT
2022-09-19 01:11:18 +02:00
af1e2fd632
new: [security] Bruteforce protection added
...
- logins allow for 5 attempts every 5 minutes
- Code ported and updated from MISP
- As reported by SK-CERT
2022-09-19 00:25:15 +02:00
07a8d1dfcb
chg: [dead variable] removed
2022-09-19 00:24:29 +02:00
254fdc3b84
chg: [security] keycloak enabled - disallow multiple users from being created for the same individual
...
- as reported by SK-CERT
2022-09-18 19:26:24 +02:00
10ea126a93
fix: [security] KeyCloak login getUser fixes
...
- removed dead code
- tightened check on the user profile, if the KC user's email address and that of the Cerebrate user disagree, block the authentication
- as reported by SK-CERT
2022-09-18 18:51:05 +02:00
85e8a35091
fix: [api rearrange] shouldn't trigger when dealing with arrays
2022-09-18 18:27:00 +02:00
370995ab50
fix: [audit log] error due to compressible fields not being streams when compression not enabled
2022-09-18 18:16:34 +02:00
3857de8499
fix: [notice] errors when not logged in removed
2022-08-24 14:47:40 +02:00
fac19e0a3c
fix: [exception] speculative fix to a check causing a 500
2022-08-24 11:43:36 +02:00
4c1ce31d50
fix: [unauthed] users internal error fixed
2022-08-24 11:42:38 +02:00
d35a674505
chg: [navigation] added keycloak self management
...
- also some changes to the navigation system
2022-08-24 11:39:56 +02:00
94bfafb743
fix: [meta template] fixes
2022-08-23 16:02:52 +02:00
8bc3088e12
fix: [revert] meta fields unindexing
...
- required for the saving of vchanges
2022-08-23 14:50:13 +02:00
095dd4513c
chg: [rearrange] moved to Entity
2022-08-23 11:42:30 +02:00
1077251f8b
fix: [keycloak] fixed encoding issue with urlencoded usernames created in keycloak
2022-08-23 11:05:07 +02:00
d96353ee4f
chg: [APIRearrange] component tied into rest response
2022-08-19 13:02:25 +02:00
3e0d015f69
fix: [meta] template loading reworked
...
- no more crappy string numeric keys among others
2022-08-19 13:01:47 +02:00
b9e5b76766
new: [component] APIRearrange component added
...
- alter the data's format before passing it back via the RestResponseComponent
- to be used to clean up UI specific artifacts / junk
- also to maintain compability between versions/tools
2022-08-19 13:00:19 +02:00
cbb737e18e
fix: [deprecation] pagination component's use removed to comply with 4.4 requirements
2022-08-17 14:00:38 +02:00
a5c9f68316
fix: [deprecation] futher toList() call updated
2022-08-17 13:49:52 +02:00
60d8a8f655
fix: [deprecation] toList() queries updated
2022-08-17 13:49:11 +02:00
a8c42969ab
chg: [VERSION] bump
2022-06-09 14:14:19 +02:00
fa68d62890
fix: [component:CRUD] Removed deprecation notice when trying to extract without requesting the collection
2022-06-08 11:56:09 +02:00
8c4c75d83a
fix: [localTools:action] Catch error if local tool's action returned unexpected data
2022-06-08 11:51:52 +02:00
d55c1fd5d1
fix: [helper:bootstrap] Allow HTML param to have value equal to 0
2022-06-08 11:05:55 +02:00
f513f8ec99
chg: [kc] disabled user capturing
...
- Cerebrate is now authoritative
2022-05-17 11:00:30 +02:00
be064bb0c9
new: [KC] profile link added
2022-05-17 10:42:44 +02:00
iglocska