Commit Graph

561 Commits (ba047885c9e9a26d9ae09fc48919d97bab997a8f)

Author SHA1 Message Date
iglocska d488f01051
fix: [authkey] add fixed
- incorrectly potentially filter out valid options when adding a key by a regular user
2022-01-19 14:39:03 +01:00
Sami Mokaddem b42941dc8e
Merge remote-tracking branch 'origin/develop' into develop 2022-01-19 09:04:20 +01:00
Sami Mokaddem 20cc6017d0
fix: [localTool:CommonConnector] Ensure one logger per connector 2022-01-19 09:04:10 +01:00
Luciano Righetti ee5c723c71 Merge branch 'develop' into add-integration-tests 2022-01-18 18:11:53 +01:00
iglocska f75d0829d1
fix: [user edit] fixed for non admins 2022-01-18 17:52:59 +01:00
iglocska dbaa2ba7b3
fix: [encryption keys] several fixes
- fix the user view to correctly point to the list of related encryption keys
- fix the lookup on the index to be based on owner_model + owner_id combo
- fix the filtering of the dropdown in the encryption key add form to only valid options
2022-01-18 16:56:38 +01:00
Luciano Righetti afcfe57767 Merge branch 'develop' into add-integration-tests 2022-01-18 16:26:06 +01:00
iglocska eae8e62e5e
fix: [CRUD] delete post message fix
- correct order of execution for the beforesave command
2022-01-18 16:24:24 +01:00
Luciano Righetti 6e31005d79 Merge branch 'develop' into add-integration-tests 2022-01-18 16:11:23 +01:00
iglocska f55365a03b
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2022-01-18 15:37:20 +01:00
iglocska 8cb24baf5f
fix: [ACL] tightening for delete functions
- implemented beforeSave() function in the CRUD::delete() functionality
- added correct handling for the organisation level encryption keys in the beforeSave constructor
2022-01-18 15:35:55 +01:00
iglocska c35d67ebca
fix: [encryption keys] functionality to filter orgs/individuals fixed
- actually execute the query rather than just build it
2022-01-18 14:59:41 +01:00
Luciano Righetti f48c1a5a17 Merge branch 'develop' into add-integration-tests 2022-01-18 14:29:54 +01:00
Sami Mokaddem 5eeda6b682
new: [localtool:commonConnectorTools] Added new logger for each local tools 2022-01-18 11:51:54 +01:00
iglocska a29a4ea024
Merge branch 'main' into develop 2022-01-18 00:23:19 +01:00
iglocska ec994b05ed
chg: [user] edit restricted to password only for self 2022-01-18 00:20:53 +01:00
iglocska b80d778e1a
fix: [encryption keys] tightened ACL across all CRUD functions 2022-01-18 00:17:47 +01:00
iglocska 8c97c3b3a0
Merge branch 'main' into develop 2022-01-17 17:17:31 +01:00
iglocska 6d13d4aba0
fix: [authkeys] tighten requirements to add authkeys for other org admins
- site admin: can add to all
- org admin: can add to all in org, except site admin
- everyone else: can add to self only
2022-01-17 17:16:03 +01:00
Sami Mokaddem 49a3dd1623
chg: [instance] Added support of API response for 2 endpoints 2022-01-17 15:55:55 +01:00
Sami Mokaddem 0c9b032536
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2022-01-17 15:30:07 +01:00
Sami Mokaddem 98e8272810
fix: [ACL] Allow anyone to view encryption keys 2022-01-17 15:29:58 +01:00
Sami Mokaddem ef2827e87a
fix: [userSettings] Various permissions issues 2022-01-17 15:24:30 +01:00
Sami Mokaddem 1c81257b75
fix: [helpers:bootstrap] Table's cell generator gets the correct row index 2022-01-17 15:22:52 +01:00
iglocska 244020802c
Merge branch 'main' into develop 2022-01-17 13:17:51 +01:00
iglocska 453c838dfe
fix: [placeholder removed] WiP functionality for local_tool->local_tool connections within the same brood temporarily removed
- was never fully implemented
2022-01-17 13:15:26 +01:00
iglocska acf85e6d10
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2022-01-17 12:49:27 +01:00
iglocska 1b4c681a88
new: [Outbox] entity added
- to inherit the appModel functions
2022-01-17 12:47:48 +01:00
Sami Mokaddem f18307b3cb
chg: [localTools:local_tool_connectors] Added support of CodeMirror placeholder 2022-01-17 11:30:26 +01:00
iglocska 12d7607aae
new: [encryption key] view added
- was missing, despite links to it
2022-01-17 09:45:45 +01:00
iglocska caf48c9060
fix: [ACL] proper error messages on user edit
- don't just silently redirect to the own user editing if the user isn't authorised to modify another user
2022-01-17 09:19:53 +01:00
iglocska 87723c2100
fix: [ACL] added correct file for previous fix (user edit admin permission check) 2022-01-12 10:32:47 +01:00
iglocska 204c60f739
fix: [ACL] fixed ACL check on user edit for the admin permission
- invalid name used for the lookup (perm_side_admin instead of perm_admin) leading to incorrect downgrading of the permissions
2022-01-12 10:31:06 +01:00
Luciano Righetti 241e760ad2 add: add API menu option 2022-01-10 16:20:22 +01:00
Luciano Righetti ce1a51cc39 fix: incorrect check 2022-01-10 11:59:23 +01:00
Luciano Righetti a69608530c new: add /api openapi spec view with redoc, add faker to fixtures, validate api responses with openapi spec, add /api/v1/ prefix to api routes 2022-01-07 13:45:52 +01:00
Luciano Righetti f45727704f fix: deprecation warning 2022-01-05 17:44:24 +01:00
Luciano Righetti a473a9d3fb new: initial api and integration tests. 2022-01-05 17:44:02 +01:00
iglocska aa23b3e293
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2021-12-22 12:27:04 +01:00
iglocska 136148705a
chg: [keycloak] added screw to loosen timing issues 2021-12-22 12:26:37 +01:00
iglocska 58e32782ca
chg: misp connector index changes 2021-12-22 12:13:27 +01:00
Sami Mokaddem 30ec856dc3
fix: [local_tool:batchApiAction] Various UI and backend fixes 2021-12-21 12:36:36 +01:00
Sami Mokaddem 3ed5af776a
fix: [local_tool:batchApiAction] Various UI and backend fixes 2021-12-21 12:34:37 +01:00
Sami Mokaddem e346a8cb05
fix: [instance:searchAll] Correct usage of parameters 2021-12-21 08:30:37 +01:00
Sami Mokaddem 0dea5ab486
chg: [metaTemplate] Added endpoint to load template from disk by uuid 2021-12-20 14:24:20 +01:00
Sami Mokaddem fa364c2b2f
fix: [metaTemplate] Repaired update_all 2021-12-15 15:33:58 +01:00
Sami Mokaddem 02cc0c30a3
chg: [metaTemplate] Major refactoring and documentation - WiP 2021-12-14 15:09:40 +01:00
Sami Mokaddem f7ae58a22d
chg: [component:crud] Renaming the default `all` contextual filter 2021-12-14 15:08:28 +01:00
Sami Mokaddem a5a959df2d
fix: [metatemplate] Removed unused code 2021-12-13 09:37:49 +01:00
Sami Mokaddem aa83b1aa37
chg: [metaTemplate] Update system and conflict resolution interfaces - WiP 2021-12-08 11:11:46 +01:00
Sami Mokaddem 8b5bb087e4
fix: [helper:bootstrap] Support of string and array for badge's class parameter 2021-12-08 11:05:52 +01:00
iglocska 4c7dc85d0e
fix: [encryptions] fixed adding encryption keys 2021-12-01 15:24:08 +01:00
iglocska 1e31f4d1dd
new: [ACL Helper] check access for controller / action pair for given user
- accesible everywhere in the UI
2021-12-01 14:25:34 +01:00
iglocska e408f29a05
chg: [appcontroller] minor changes
- getRoleAccess now returns array format
- moved setting of view variables behind a rest check, to avoid additional unused actions for API queries
- current user's role access matrix passed to view via "roleAccess"
2021-12-01 14:24:32 +01:00
iglocska fbb1a52724
new: [ACL component] new functionalities
- getRoleAccess now returns either URLs or arrays
- array format allows for easy checking of controller + action pairs
2021-12-01 14:22:02 +01:00
Sami Mokaddem 819d96e805
new: [metaTemplate] Interface and functions to update meta-templates - WiP
Actual update not implemented yet.
2021-12-01 11:01:31 +01:00
Sami Mokaddem da889c4ca2
fix: [helpers:bootstrap] Make sure to sanitize passed text 2021-12-01 08:26:17 +01:00
Sami Mokaddem d2a88b3a18
chg: [Component:Navigation] Breadcrumbs get loaded before rendering to have access to view var
So that it can have access to view variables
2021-12-01 08:25:20 +01:00
iglocska 392faa60e4
new: [ACL] getRoleAccess endpoint added
- prints all valid URLs for the current user's role
2021-11-30 00:00:05 +01:00
iglocska c7d40d42c7
fix: [ACL] added missing entries 2021-11-29 23:37:41 +01:00
iglocska 22be309dc2
fix: [ACL] fix wildcard controller checks failing 2021-11-28 23:42:22 +01:00
iglocska 7fa0537cfd
fix: [encryption keys] only show valid options when creating keys as a user 2021-11-27 23:51:32 +01:00
iglocska 312229751b
fix: [keycloak] enrollment org_id issues fixed 2021-11-25 11:55:51 +01:00
iglocska cc5c750de8
chg: [audit log] change field renamed to changed
- change is a reserved keyword
- this way quoting of field names is no longer needed in the cakePHP settings
2021-11-25 00:57:31 +01:00
iglocska 1ee895cedf
Merge branch 'main' into develop 2021-11-25 00:36:25 +01:00
iglocska 033f6d7f97
fix: [typo] organisations != oganisations 2021-11-25 00:02:16 +01:00
iglocska c2cefb4311
fix: [user init] generation fixed 2021-11-24 23:59:34 +01:00
iglocska c7768921fb
fix: [user init] explicit uuid creation removed
- added behavior wherever it was missing
2021-11-24 23:32:17 +01:00
iglocska 716f6b1147
fix: [default user creation] explicitly create UUIDs 2021-11-24 23:24:04 +01:00
Sami Mokaddem e8e1a16673
chg: [search_all] Added drafty support of meta-fields 2021-11-24 22:39:22 +01:00
iglocska eb0a67327a
fix: [initial user] generation fixed
- requires a default organisation + org link now
2021-11-24 14:46:34 +01:00
Sami Mokaddem aa42e6763a
chg: [metaTemplate] Started implementing new update system - WiP 2021-11-24 09:14:09 +01:00
Sami Mokaddem 94c0b171a1
chg: [component:CRUD] Added comment to be fixed later on - WiP 2021-11-24 09:12:39 +01:00
iglocska bacb3dc85e
fix: [API] fixed broken API
- don't call functions specifically meant for the UI when in an ACL context
- also fixed breaking issues with the logging
2021-11-24 01:50:55 +01:00
iglocska 92fee87a7f
fix: [keycloak] when enrolling users in keycloak, use the user organisation_id instead of the individual's first alias 2021-11-24 01:34:15 +01:00
iglocska 3cc857c42f
fix: [auditlog] use insert() rather than save() as that is not available in the behavior
- fixes exception on logging deletes, blocking any actual deletions
2021-11-24 01:33:26 +01:00
iglocska 22e4a90af0
chg: [ACL] tightened ACL for several controllers
- org admins now have access to new functionalities, added ACL for them
- Affected controllers:
  - Authkeys, encryptionkeys, users, sharinggroups
- sets defaults/restricts access accordingly
2021-11-24 01:32:05 +01:00
iglocska 0fe7f4f931
new: [CRUD] added additional features to the CRUD component
- conditions passable to add/edit/index/delete
- refactored get() requests internally to finds to accomodate for additional parameters
- delete() now takes a params[] array as a second argument
2021-11-24 01:30:28 +01:00
iglocska 5483357e1c
chg: [ACL] fix permissions for org admins
- also, fix a bug with the simple permissions being ignored
2021-11-24 01:29:39 +01:00
iglocska dad310f434
chg: [appcontroller] include user org in loaded user object during authentication
- also log username as username rather than name
2021-11-24 01:28:52 +01:00
iglocska e5e4e74cae
chg: [users] associated with orgs 2021-11-24 01:25:32 +01:00
Sami Mokaddem ef41d71c8b
chg: [helper:bootstrap] Improved dropdown menu badge UI 2021-11-23 16:27:01 +01:00
Sami Mokaddem 4acf5209c8
chg: [metaFields] Clean-up and improved regex matching 2021-11-23 15:30:37 +01:00
Sami Mokaddem 87ac0f7569
chg: [helpers:bootstrap] Formatted file 2021-11-23 15:29:55 +01:00
Sami Mokaddem 3c0237f387
fix: [component:CRUD] Regression where entities not supporting metafields couldn't be saved 2021-11-23 14:56:25 +01:00
Sami Mokaddem fd21934641
chg: [sharingGroups] Cleaned useless view variables 2021-11-23 14:55:21 +01:00
Sami Mokaddem ef91cfcee3
chg: [genericElements:index_table] Continuation of stats for current view - WiP 2021-11-17 17:04:39 +01:00
iglocska 18b78e8eec
fix: [audit log] filtering now uses request_action rather than the renamed action field 2021-11-17 16:04:57 +01:00
iglocska ff77af0a8e
new: [appmodel] moved constants related to the logging along with a getter to app model 2021-11-17 15:58:06 +01:00
iglocska fe8e217d61
chg: [audit log naming] renamed action to request_action to avoid reserved keyword usage 2021-11-17 15:57:34 +01:00
iglocska 7b52d29320
new: [login] log success/failure 2021-11-17 15:49:28 +01:00
iglocska bc2e2fa488
new: [open] individualscontroller fix
- import badrequest exception
2021-11-17 15:48:49 +01:00
iglocska cc04373375
new: [crud component] fixes
- add hidden option
- fix afterfind
2021-11-17 15:47:32 +01:00
iglocska 1f77569344
chg: [auditlog] log api authentication failures / successes 2021-11-17 15:46:32 +01:00
iglocska 2e1ee2d064
new: [audit log] behaviour tied into the appropriate models 2021-11-17 15:43:52 +01:00
iglocska af4f114f2f
chg: [audit logs] tied into side menu 2021-11-17 14:45:20 +01:00
iglocska 23dc460359
new: [auditlog system] added
- port of Jakub Onderka's implementation from MISP
- Still not fully realised, lacking search functionalities
2021-11-17 14:44:07 +01:00
Sami Mokaddem 25f0f07251
chg: [genericElements:index_table] Added support of statistic for current view - WiP 2021-11-15 11:51:47 +01:00
Sami Mokaddem 9fd7f1fe61
chg: [appTable] Moved statistics functions out of instanceTable
FIXME: This should be later on converted into a standalone tool
2021-11-15 11:48:23 +01:00
Sami Mokaddem 560832654e
chg: [helper:boostrap] Support of list of string for class in card 2021-11-15 11:47:17 +01:00
Sami Mokaddem 7cf7363009
chg: [genericElements:index_table] Moved description to a tooltip
Description describing indexes are great when discovering an app for the first time but start taking important place and become useless when users gets to know the app better. Moving it to a tooltip makes sense in that regard.
2021-11-15 08:29:16 +01:00
Sami Mokaddem 509b203591
chg: [instance:home] Added support of both `modified` and `created` in stat panels 2021-11-12 15:40:03 +01:00
Sami Mokaddem 24e5a94662
chg: [mailinglist:addIndividual] Removed possiblity to edit individual already in the list
This can be confusing and require special handling when saving joinData
2021-11-12 13:49:54 +01:00
Sami Mokaddem 2ba3e3ce00
fix: [mailinglist] Edition was not possible in some cases 2021-11-11 15:22:35 +01:00
Sami Mokaddem b51cf2ed59
fix: [Component:CRUD] Pass expected argument 2021-11-11 14:51:51 +01:00
Sami Mokaddem 6579482526
chg: [Organisation] Moved model to use meta-field behavior instead of association 2021-11-11 14:50:25 +01:00
Sami Mokaddem 33c83f4020
chg: [ui] Renamed search button in index_table
Search seems more appropriate than filter
2021-11-10 15:31:09 +01:00
Sami Mokaddem cc0b1ad3b4
chg: [component:CRUD] Added support of metafield in quickfilter feature 2021-11-10 15:28:09 +01:00
Sami Mokaddem d6d592ff8c
new: [genericElement:index_table] Added support of meta_fields searches 2021-11-10 12:07:27 +01:00
Sami Mokaddem 549d9f3e1b
fix: [behavior:metaField] Wildcard searches now work if the wildcare is placed in front 2021-11-10 12:06:04 +01:00
Sami Mokaddem a376055095
chg: [helper:bootstrap] Support of header in dropdown menu 2021-11-10 09:29:27 +01:00
Sami Mokaddem a005d0491f
new: [genericElements:index_table] Support of meta_fields in table column 2021-11-10 09:06:39 +01:00
Sami Mokaddem d71f48fc9f
chg: [component:CRUD] Small refactoring to improve re-usability 2021-11-10 09:02:51 +01:00
Sami Mokaddem 69f8375422
chg: [helper:bootstrap] Added support of badge in dropdown menu entries 2021-11-10 08:54:43 +01:00
Sami Mokaddem 04ad3be4a6
fix: [component:CRUD] Correctly inspect the redirect key 2021-11-09 09:15:19 +01:00
Sami Mokaddem 1feed8ecaf
fix: [component:paramHandler] Correctly handle arrays
Also removed duplicated function
2021-11-09 09:12:41 +01:00
Sami Mokaddem 452873e3ba
chg: [ui:meta_templates] Slightly improved UI 2021-11-09 09:11:35 +01:00
Sami Mokaddem a0f6c6a7e0
chg: [behavior:meta_field] Better integration in CRUD and tables 2021-11-09 08:59:17 +01:00
Sami Mokaddem f62caa919b
chg: [navigation] Navigation's actions now relies on modal instead of redirecting to the page 2021-11-08 15:56:39 +01:00
Sami Mokaddem d045f1f4d5
chg: [ui] Added support of redirections via Ajax responses 2021-11-08 15:54:37 +01:00
Sami Mokaddem 50737543a9
chg: [component:CRUD] Cleanup leftovers comments 2021-11-08 15:03:05 +01:00
Sami Mokaddem 94fbd74918
chg: [component:CRUD] Support of validation and re-edition (WiP) 2021-11-08 14:08:47 +01:00
Sami Mokaddem b1f08f3b2d
chg: [component:CRUD] Actually delete empty metafields on edit 2021-11-05 17:44:37 +01:00
Sami Mokaddem fc436e89e2
chg: [element:genericForm] Usage of bootstrap component to generate ajax modal 2021-11-05 17:44:05 +01:00
Sami Mokaddem 26859d045e
fix: [element] Made single views aware of multiple meta-fields 2021-11-05 17:03:11 +01:00
Sami Mokaddem bb9ca6e69d
fix: [Component:CRUD] Make set quickfilter works again
Call the function with correct number of argument
2021-11-04 15:21:03 +01:00
Sami Mokaddem 4f084e6beb
chg: [app] Various layout improvements for responsiveness 2021-11-04 10:47:03 +01:00
Sami Mokaddem c55088aa85
chg: [metaTemplate] Continuation of refactoring - WiP
Editing meta field from entities working
2021-11-04 08:10:32 +01:00
Sami Mokaddem 16581a13fb
chg: [individual] MailingLists association improved 2021-11-04 08:09:01 +01:00
Sami Mokaddem 9373c35bc6
chg: [metaTemplate] Started refactoring the whole feature
Objective of the refactoring is to:
Simplified metafields searches and started to add support of multi-field and edition
2021-11-03 11:47:10 +01:00
Sami Mokaddem 51d93d40af
chg: [ui] Various UI improvement and cleanup
New according bootstrap component and small UI enhancements
2021-10-28 09:27:30 +02:00
Sami Mokaddem 4ef6738053
chg: [mailinglist] Improved feature
Previously, emails were stored as json encoded string. To add more flexibility and prevent inconsistencies (such as propagating email changes to the mailing list), it has been moved to a table.
2021-10-28 09:00:20 +02:00
Sami Mokaddem fe9fbe2e99
new: [mailing-list] Added mailing list feature - WiP 2021-10-25 16:20:36 +02:00
iglocska e2d6022726
Merge branch 'main' of github.com:cerebrate-project/cerebrate into main 2021-10-21 13:47:17 +02:00
iglocska b6c3aee91f
fix: [settings] invalid path to setting fixed 2021-10-21 13:44:49 +02:00
Sami Mokaddem 39f7a3f9e1
fix: [user] Added support of timestamp behavior 2021-10-21 11:33:41 +02:00
Sami Mokaddem 481bf1201f
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2021-10-21 11:27:30 +02:00
Sami Mokaddem 4cc4101670
fix: [in/outboxes] Full support of timestamp behavior 2021-10-21 11:27:02 +02:00
iglocska 4402e7e074
fix: [theme] drop to default if nothing is configured instead of barfing 2021-10-21 11:26:15 +02:00
iglocska d4d5b28341
fix: [theme] selection always defaults to default if no user setting set fixed 2021-10-21 11:06:12 +02:00
iglocska 411a37bfbf
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2021-10-21 11:00:13 +02:00
iglocska d8b2de7460
chg: [settings] fixes
- use a JSON file for the config
- stop using cake4 dump/load for the process
- move settings back to the root level
- Research Flyer Carapace level 1
2021-10-21 10:58:07 +02:00
Sami Mokaddem d21bad721a
fix: [genericTemplate:filters] Correctly takes filter fields and simplified UI 2021-10-21 10:20:07 +02:00
Sami Mokaddem 370ae3438e
new: [user:registration] Added user self-registration feature 2021-10-20 22:29:23 +02:00
Sami Mokaddem e5a958e8c9
chg: [sidemenu] Moved local tools 2021-10-20 15:47:45 +02:00
iglocska 7ba043682b
fix: [settings] settings changes
- added keycloak settings back
- commented out placeholder settings
2021-10-20 14:34:46 +02:00
iglocska c0e1936849
chg: [keycloak] settings moved to CerebrateSettingsProvider 2021-10-20 14:27:33 +02:00
iglocska 6262fb543c
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop 2021-10-20 14:27:14 +02:00
iglocska ea73b19494
new: [keycloak] initial settings 2021-10-20 14:23:22 +02:00
Sami Mokaddem 6c4efc044d
fix: [settings] Make sure to save multi-select value as an array 2021-10-20 12:48:13 +02:00