Commit Graph

309 Commits (813ec6f0a5b5fddab97a64b22579a77fddfac02c)

Author SHA1 Message Date
Sami Mokaddem 3dddd96eeb
chg: [element:metafield_panel] Metafield now relying on their index type when being displayed on singleViews 2022-11-28 12:12:01 +01:00
Sami Mokaddem 41e425cfa2
new: [metaTemplateField] Added `index_type` virtual property to use the correct index_table element 2022-11-15 14:54:44 +01:00
Sami Mokaddem 84069cfe40
chg: [metaTemplateField] More generic way to specify form type 2022-11-14 15:45:28 +01:00
Sami Mokaddem b6fdf37d54
fix: [metafields:dropdown] Patched saving multiple fields with custom value 2022-11-14 15:38:50 +01:00
Sami Mokaddem b53f2681b4
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into feature-metafield-dropdown 2022-11-14 14:53:02 +01:00
Sami Mokaddem 7d6696e079
new: [metaFields] Adding support of sane_default + improving form & crud - WiP 2022-11-14 09:04:35 +01:00
iglocska 5c02f1c6a4
chg: [cleanup] of the default role setting for keycloak
- not used in any sensible way anymore
2022-11-13 11:18:54 +01:00
iglocska 260e1d30a1
new: [individuals] rework
- allow modifications for org admins of individuals associated to their users
  - unless they're site admins
- add user information to the individual index to bring clarity to the individual vs users confusion
- rework of the user form field object
2022-11-13 11:09:34 +01:00
iglocska 6d41622129
new: [user deletion] tied into KeyCloak
- remove user from KC when possible
- proceed for local users
2022-11-11 15:10:04 +01:00
iglocska 99febe19db
fix: [keycloak] re-enabled the getUser function, removed the placeholder forced user fetch 2022-11-09 14:10:54 +01:00
iglocska b1f09dc97e
new: [permission limitations] subsystem added
- add limitations for users with given meta fields
  - x number / org and y number / globally
- add comments to the limitations
- enforced on user creation/modification
2022-11-09 14:09:27 +01:00
iglocska 16a3826cef
chg: [encryption keys] rearranged for the API 2022-11-09 13:59:39 +01:00
iglocska 7675e27e90
chg: [user index] API refactored 2022-11-04 09:59:48 +01:00
iglocska 003053f13d
new: [API rearrange] added a simplifier for commonly used objects
- let's only return the subset of the data required to identify and retrieve the related data
2022-11-04 09:58:55 +01:00
iglocska 540fd63423
fix: [API] cleaned up the individual API 2022-11-04 09:33:39 +01:00
iglocska 11510ea28f
new: [individual] editing enabled for org admins
- requires that a user exist for the given individual
2022-10-31 14:42:58 +01:00
iglocska 8dbbb21dff
chg: [users] add metafields behaviour 2022-10-31 13:38:31 +01:00
iglocska 5ec0471cce
chg: [keycloak mapper] also pushes default mappings if they don't exist 2022-10-31 13:36:53 +01:00
iglocska ce6575cfb6
chg: [User] Entity - added rearrangeForAPI() to rearrange meta fields 2022-10-31 13:26:44 +01:00
iglocska 2a31e39762
new: [keycloak] automatically set mappings 2022-10-31 13:26:12 +01:00
iglocska 2f4b6ed2ff
chg: [keycloak] integration rework
- switch to the use of attributes
- several minor fixes
2022-10-31 11:31:38 +01:00
Sami Mokaddem dde7bbe75f
chg: [behavior:notifyAdmin] Small refactor to better handle deletions 2022-10-27 11:07:21 +02:00
Sami Mokaddem 225913f9c6
new: [organisation] Added `notifyAdmin` behavior.
Might be removed later on if needed
2022-10-27 10:14:57 +02:00
Sami Mokaddem d0119b2dba
new: [user] Added `notifyAdmin` behavior 2022-10-27 10:14:09 +02:00
Sami Mokaddem ee5adaf971
chg: [behavior:adminNotification] Added support of watched fields and improved metafield integration 2022-10-27 10:12:06 +02:00
Sami Mokaddem c8ff7bb4b2
new: [adminNotificationBehavior] Added first version of new behavior and associated inboxProcessor
This behavior allows to specify on which fields modification site-admins should be notified by receiving a message in their inbox
2022-10-26 17:10:04 +02:00
iglocska 9c41fd548f
fix: [auth] added keycloak logout 2022-10-25 15:08:41 +02:00
Sami Mokaddem 00c1ae616f
new: [inboxes] Added `severity` level and `message` and removed `description` column 2022-10-25 14:38:16 +02:00
iglocska 9a8372be12
fix: [return type] validation removed 2022-10-25 11:01:23 +02:00
iglocska 84537c52f9
new: [user enrollment] send keycloak welcome email to users when enrolled 2022-10-25 10:57:18 +02:00
Sami Mokaddem 6d40968f24
chg: [appTable] Set string format of FrozenTime to ISO 8601-like by default 2022-10-25 10:27:58 +02:00
Sami Mokaddem b555aed178
chg: [auditLog:entity] unset useless noise from user-settings 2022-10-21 16:06:09 +02:00
iglocska 41a241cada
new: [pgp] library ported from MISP
- added proper view elements for encryption keys
- added key information extraction
2022-10-21 15:25:52 +02:00
Sami Mokaddem a091edbf22
fix: [user:beforeSave] Only call the user-update callback if the user is not new 2022-10-21 09:00:49 +02:00
Sami Mokaddem c65978f8f2
fix: [behavior:authKeycloak] Correctly check if the user was saved 2022-10-21 08:59:36 +02:00
Sami Mokaddem 21403995e3
new: [user:edit] Added keycloak updates when a user gets modified 2022-09-21 10:11:09 +02:00
Sami Mokaddem 37094e0abb
fix: [user:validation] Allow user edition when `username` is not set 2022-09-21 10:10:02 +02:00
Sami Mokaddem 2c87b1e500
fix: [authKeycloakBehavior] Added missing association preventing user to log via keycloak 2022-09-21 10:07:51 +02:00
Sami Mokaddem 69fee02498
fix: [authKeycloakBehavior] Re-indexing array preventing roles to be parsed by keycloak 2022-09-21 10:06:33 +02:00
Sami Mokaddem efe917c824
fix: [authKeycloakBehavior] Typo preventing roles to be saved 2022-09-21 10:05:55 +02:00
iglocska 5e0ab5cc38
new: [users] username validation added
- >5 && <50 in length required
- trim username to test to avoid whitespace names

- as reported by SK-CERT
2022-09-19 01:22:53 +02:00
iglocska 9a50a5693e
fix: [users] added uniqueness to usernames
- added upgrade script with removal of duplicate usernames
- added unique index to username field
- massaging the usernames before insertion (trim + lowercasing)

- As reported by SK-CERT
2022-09-19 01:12:14 +02:00
iglocska af1e2fd632
new: [security] Bruteforce protection added
- logins allow for 5 attempts every 5 minutes
- Code ported and updated from MISP

- As reported by SK-CERT
2022-09-19 00:25:15 +02:00
iglocska 07a8d1dfcb
chg: [dead variable] removed 2022-09-19 00:24:29 +02:00
iglocska 10ea126a93
fix: [security] KeyCloak login getUser fixes
- removed dead code
- tightened check on the user profile, if the KC user's email address and that of the Cerebrate user disagree, block the authentication

- as reported by SK-CERT
2022-09-18 18:51:05 +02:00
iglocska 94bfafb743
fix: [meta template] fixes 2022-08-23 16:02:52 +02:00
iglocska 095dd4513c
chg: [rearrange] moved to Entity 2022-08-23 11:42:30 +02:00
iglocska 1077251f8b
fix: [keycloak] fixed encoding issue with urlencoded usernames created in keycloak 2022-08-23 11:05:07 +02:00
iglocska d96353ee4f
chg: [APIRearrange] component tied into rest response 2022-08-19 13:02:25 +02:00
iglocska a5c9f68316
fix: [deprecation] futher toList() call updated 2022-08-17 13:49:52 +02:00