ef2827e87a
fix: [userSettings] Various permissions issues
2022-01-17 15:24:30 +01:00
12d7607aae
new: [encryption key] view added
...
- was missing, despite links to it
2022-01-17 09:45:45 +01:00
caf48c9060
fix: [ACL] proper error messages on user edit
...
- don't just silently redirect to the own user editing if the user isn't authorised to modify another user
2022-01-17 09:19:53 +01:00
87723c2100
fix: [ACL] added correct file for previous fix (user edit admin permission check)
2022-01-12 10:32:47 +01:00
204c60f739
fix: [ACL] fixed ACL check on user edit for the admin permission
...
- invalid name used for the lookup (perm_side_admin instead of perm_admin) leading to incorrect downgrading of the permissions
2022-01-12 10:31:06 +01:00
30ec856dc3
fix: [local_tool:batchApiAction] Various UI and backend fixes
2021-12-21 12:36:36 +01:00
4c7dc85d0e
fix: [encryptions] fixed adding encryption keys
2021-12-01 15:24:08 +01:00
e408f29a05
chg: [appcontroller] minor changes
...
- getRoleAccess now returns array format
- moved setting of view variables behind a rest check, to avoid additional unused actions for API queries
- current user's role access matrix passed to view via "roleAccess"
2021-12-01 14:24:32 +01:00
fbb1a52724
new: [ACL component] new functionalities
...
- getRoleAccess now returns either URLs or arrays
- array format allows for easy checking of controller + action pairs
2021-12-01 14:22:02 +01:00
392faa60e4
new: [ACL] getRoleAccess endpoint added
...
- prints all valid URLs for the current user's role
2021-11-30 00:00:05 +01:00
c7d40d42c7
fix: [ACL] added missing entries
2021-11-29 23:37:41 +01:00
22be309dc2
fix: [ACL] fix wildcard controller checks failing
2021-11-28 23:42:22 +01:00
7fa0537cfd
fix: [encryption keys] only show valid options when creating keys as a user
2021-11-27 23:51:32 +01:00
cc5c750de8
chg: [audit log] change field renamed to changed
...
- change is a reserved keyword
- this way quoting of field names is no longer needed in the cakePHP settings
2021-11-25 00:57:31 +01:00
bacb3dc85e
fix: [API] fixed broken API
...
- don't call functions specifically meant for the UI when in an ACL context
- also fixed breaking issues with the logging
2021-11-24 01:50:55 +01:00
22e4a90af0
chg: [ACL] tightened ACL for several controllers
...
- org admins now have access to new functionalities, added ACL for them
- Affected controllers:
- Authkeys, encryptionkeys, users, sharinggroups
- sets defaults/restricts access accordingly
2021-11-24 01:32:05 +01:00
0fe7f4f931
new: [CRUD] added additional features to the CRUD component
...
- conditions passable to add/edit/index/delete
- refactored get() requests internally to finds to accomodate for additional parameters
- delete() now takes a params[] array as a second argument
2021-11-24 01:30:28 +01:00
5483357e1c
chg: [ACL] fix permissions for org admins
...
- also, fix a bug with the simple permissions being ignored
2021-11-24 01:29:39 +01:00
dad310f434
chg: [appcontroller] include user org in loaded user object during authentication
...
- also log username as username rather than name
2021-11-24 01:28:52 +01:00
18b78e8eec
fix: [audit log] filtering now uses request_action rather than the renamed action field
2021-11-17 16:04:57 +01:00
7b52d29320
new: [login] log success/failure
2021-11-17 15:49:28 +01:00
bc2e2fa488
new: [open] individualscontroller fix
...
- import badrequest exception
2021-11-17 15:48:49 +01:00
cc04373375
new: [crud component] fixes
...
- add hidden option
- fix afterfind
2021-11-17 15:47:32 +01:00
1f77569344
chg: [auditlog] log api authentication failures / successes
2021-11-17 15:46:32 +01:00
af4f114f2f
chg: [audit logs] tied into side menu
2021-11-17 14:45:20 +01:00
23dc460359
new: [auditlog system] added
...
- port of Jakub Onderka's implementation from MISP
- Still not fully realised, lacking search functionalities
2021-11-17 14:44:07 +01:00
b6c3aee91f
fix: [settings] invalid path to setting fixed
2021-10-21 13:44:49 +02:00
4402e7e074
fix: [theme] drop to default if nothing is configured instead of barfing
2021-10-21 11:26:15 +02:00
d4d5b28341
fix: [theme] selection always defaults to default if no user setting set fixed
2021-10-21 11:06:12 +02:00
411a37bfbf
Merge branch 'develop' of github.com:cerebrate-project/cerebrate into develop
2021-10-21 11:00:13 +02:00
d8b2de7460
chg: [settings] fixes
...
- use a JSON file for the config
- stop using cake4 dump/load for the process
- move settings back to the root level
- Research Flyer Carapace level 1
2021-10-21 10:58:07 +02:00
d21bad721a
fix: [genericTemplate:filters] Correctly takes filter fields and simplified UI
2021-10-21 10:20:07 +02:00
370ae3438e
new: [user:registration] Added user self-registration feature
2021-10-20 22:29:23 +02:00
e5a958e8c9
chg: [sidemenu] Moved local tools
2021-10-20 15:47:45 +02:00
78180fa90f
new: [userSettings] Added complete support of user settings
...
Including support of bookmarks, sidebar behavior and theming
2021-10-18 13:28:26 +02:00
0d6e6aa7a4
chg: [userSettings] Initial version of template - WiP
2021-10-12 10:16:36 +02:00
29ca08ce60
new: [sidebar:bookmarks] Added early version of user-defined bookmarks
...
Bookmark configs are saved in their respective user setting for each users
2021-10-08 16:57:38 +02:00
79f4bc3c6b
chg: [userSettings] Added endpoints to better interact with user settings
2021-10-08 16:49:12 +02:00
0d4fafb14b
chg: [navigation:sidemenu] Translation for link groups
2021-10-08 16:47:38 +02:00
13d546fd2a
chg: [app] Generate side menu for logged-in users only
2021-10-08 16:45:56 +02:00
39fdb8ec0d
new: [user-settings] Added user settings feature
2021-10-08 10:27:40 +02:00
7ab8a93fbd
chg: [navigation] regrouped navigation related data into files
2021-10-08 10:23:03 +02:00
f068d18d49
fix: [application:migration] Better support of plugin migration
2021-10-04 11:01:20 +02:00
9685406d99
Merge branch 'develop-unstable' of github.com:cerebrate-project/cerebrate into develop-unstable
2021-10-01 15:13:54 +02:00
85ee7c69a5
fix: [plugins:tags] Use correct namespace and variable name
2021-10-01 15:13:18 +02:00
99a89977c8
Merge branch 'keycloak' into develop-unstable
2021-10-01 13:53:14 +02:00
f60e411af1
new [keycloak]: WiP user enrollment added
...
- also moved the keycloak specific functionalities to a behaviour
- added new role permission (org admin)
2021-10-01 13:19:26 +02:00
348792c815
chg: [app] Added timestamp behavior for multiple models
2021-09-28 13:32:51 +02:00
de8ee047f9
chg: [component:navigation] Added support of settings in breadcrumbs
2021-09-27 14:02:50 +02:00
b4fdc625da
chg: [setting] Support of themes in settings
2021-09-18 11:21:50 +02:00
Sami Mokaddem