e0f92aa8e0
fix: [validation] Tightened the validation rules for users to avoid 500 errors when the requirements are not met
...
- ensure that username is unique
- (optional) ensure that individual->user assignment is unique
- (optional) ensure that usernames are e-mail addresses
- As reported by Matúš Mikuláš, Adam Gajdošík, Milan Pikula of SK-CERT
2023-01-03 15:03:06 +01:00
da2f904554
fix: [security] reworked the Individual handling of user creations / modifications
...
- creating a new user with the e-mail address of an already existing individual should NOT overwrite the first/last name fields
- it merely connects the individual to the new user
- disallow changing the individual behind an existing user altogether
- allow capturing individuals without updates
- As reported by Matúš Mikuláš, Adam Gajdošík, Milan Pikula of SK-CERT
2022-12-23 16:47:44 +01:00
256bfa8702
fix: [users] handle saving of a user without KC
2022-12-16 15:32:29 +01:00
d4c827c662
fix: [kc] attribute update fixed
2022-12-14 06:46:42 +01:00
675cac8944
new: [custom attribute saving] wip
2022-12-14 06:22:04 +01:00
35a395c68c
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop
2022-12-13 15:45:44 +01:00
0b052aaebf
fix: [users:view] Gracefully handle the case where user exist in cerebrate but not in keycloak
2022-12-13 15:44:37 +01:00
d9330a1ddc
chg: [param] order changed
2022-12-13 11:00:30 +01:00
8c94aae994
fix: [behavior:notifyAdmin] Removed required parameter after optional
2022-12-13 10:56:05 +01:00
d293cb52f8
chg: [behavior:keycloak] Gracefully handle issues while syncing with keycloak
2022-12-12 16:56:51 +01:00
178a5b658f
chg: [behavior:keycloak] Perform case insensitive comparison
...
For both cerebrate and keycloak users
2022-12-12 16:49:52 +01:00
e366da6171
fix: [behavior:keycloak] Trying to lower fever the best I can
2022-12-12 08:45:02 +01:00
af622dd19b
new: [users:view] Added keycloak status showing the potential differences between Cerebrate and Keycloak
2022-12-09 11:54:34 +01:00
b121399304
fix: [user:checkPermissionRestriction] Refactor the function to support more edge-cases
2022-12-08 15:39:28 +01:00
9a2e94989f
fix: [permissionlimitation:getLimitations] Mirror the permission limit if only one scope (global or org) is defined
2022-12-08 15:38:04 +01:00
409c116ad7
chg: [permissionlimitation:validation] Added rule for max_occurence
2022-12-08 15:35:02 +01:00
4ab9761fb5
fix: [behavior:notifyAdmins] Typo resetting a variable
2022-12-08 10:25:13 +01:00
f3ee43ed46
chg: [user:NotifyAdminBehavior] Track modification on meta_fields
2022-12-08 10:24:09 +01:00
c61c16c83c
fix: [user:beforeSave] Make sure variable is initialized
2022-12-08 10:19:28 +01:00
41e425cfa2
new: [metaTemplateField] Added `index_type` virtual property to use the correct index_table element
2022-11-15 14:54:44 +01:00
84069cfe40
chg: [metaTemplateField] More generic way to specify form type
2022-11-14 15:45:28 +01:00
b6fdf37d54
fix: [metafields:dropdown] Patched saving multiple fields with custom value
2022-11-14 15:38:50 +01:00
b53f2681b4
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into feature-metafield-dropdown
2022-11-14 14:53:02 +01:00
7d6696e079
new: [metaFields] Adding support of sane_default + improving form & crud - WiP
2022-11-14 09:04:35 +01:00
5c02f1c6a4
chg: [cleanup] of the default role setting for keycloak
...
- not used in any sensible way anymore
2022-11-13 11:18:54 +01:00
260e1d30a1
new: [individuals] rework
...
- allow modifications for org admins of individuals associated to their users
- unless they're site admins
- add user information to the individual index to bring clarity to the individual vs users confusion
- rework of the user form field object
2022-11-13 11:09:34 +01:00
6d41622129
new: [user deletion] tied into KeyCloak
...
- remove user from KC when possible
- proceed for local users
2022-11-11 15:10:04 +01:00
99febe19db
fix: [keycloak] re-enabled the getUser function, removed the placeholder forced user fetch
2022-11-09 14:10:54 +01:00
b1f09dc97e
new: [permission limitations] subsystem added
...
- add limitations for users with given meta fields
- x number / org and y number / globally
- add comments to the limitations
- enforced on user creation/modification
2022-11-09 14:09:27 +01:00
16a3826cef
chg: [encryption keys] rearranged for the API
2022-11-09 13:59:39 +01:00
7675e27e90
chg: [user index] API refactored
2022-11-04 09:59:48 +01:00
003053f13d
new: [API rearrange] added a simplifier for commonly used objects
...
- let's only return the subset of the data required to identify and retrieve the related data
2022-11-04 09:58:55 +01:00
540fd63423
fix: [API] cleaned up the individual API
2022-11-04 09:33:39 +01:00
11510ea28f
new: [individual] editing enabled for org admins
...
- requires that a user exist for the given individual
2022-10-31 14:42:58 +01:00
8dbbb21dff
chg: [users] add metafields behaviour
2022-10-31 13:38:31 +01:00
5ec0471cce
chg: [keycloak mapper] also pushes default mappings if they don't exist
2022-10-31 13:36:53 +01:00
ce6575cfb6
chg: [User] Entity - added rearrangeForAPI() to rearrange meta fields
2022-10-31 13:26:44 +01:00
2a31e39762
new: [keycloak] automatically set mappings
2022-10-31 13:26:12 +01:00
2f4b6ed2ff
chg: [keycloak] integration rework
...
- switch to the use of attributes
- several minor fixes
2022-10-31 11:31:38 +01:00
dde7bbe75f
chg: [behavior:notifyAdmin] Small refactor to better handle deletions
2022-10-27 11:07:21 +02:00
225913f9c6
new: [organisation] Added `notifyAdmin` behavior.
...
Might be removed later on if needed
2022-10-27 10:14:57 +02:00
d0119b2dba
new: [user] Added `notifyAdmin` behavior
2022-10-27 10:14:09 +02:00
ee5adaf971
chg: [behavior:adminNotification] Added support of watched fields and improved metafield integration
2022-10-27 10:12:06 +02:00
c8ff7bb4b2
new: [adminNotificationBehavior] Added first version of new behavior and associated inboxProcessor
...
This behavior allows to specify on which fields modification site-admins should be notified by receiving a message in their inbox
2022-10-26 17:10:04 +02:00
9c41fd548f
fix: [auth] added keycloak logout
2022-10-25 15:08:41 +02:00
00c1ae616f
new: [inboxes] Added `severity` level and `message` and removed `description` column
2022-10-25 14:38:16 +02:00
9a8372be12
fix: [return type] validation removed
2022-10-25 11:01:23 +02:00
84537c52f9
new: [user enrollment] send keycloak welcome email to users when enrolled
2022-10-25 10:57:18 +02:00
6d40968f24
chg: [appTable] Set string format of FrozenTime to ISO 8601-like by default
2022-10-25 10:27:58 +02:00
b555aed178
chg: [auditLog:entity] unset useless noise from user-settings
2022-10-21 16:06:09 +02:00
iglocska