Eric Espié
c3fbdc907c
N°1248 - User Management: Check organization related to the current user
...
SVN:trunk[5677]
2018-04-17 10:22:12 +00:00
Eric Espié
85a5ddb980
N°478 - Customizable access to the 'Admin Tools'
...
- Display additional rights (grant_by_profile) in the grant matrix
SVN:trunk[5367]
2018-02-26 10:38:09 +00:00
Eric Espié
d65bd97956
N°478 - Customizable access to the 'Admin Tools'
...
SVN:trunk[5364]
2018-02-23 11:13:07 +00:00
Eric Espié
94d45fc77f
N°1248 - User Management Portal
...
* Added a new grant_by_profile category that allows to manage certain classes in addition to bizmodel with user profiles.
* The following classes have the new grant_by_profile category:
User, UserInternal, UserLocal, UserLDAP, UserExternal, URP_UserProfile, URP_UserOrg
* For these classes, it is possible to manage access rights with user profiles for non-administrators.
* For these classes, the default behavior of SELECT requests changes from allowed to forbidden.
* For user profiles, the default behavior '*' is limited to the bizmodel category to keep the previous behavior of profiles, i. e. for classes in the grant_by_profile category, rights (including READ) must be given explicitly.
* New constraints have been added, so only an administrator can manage (attach or detach) the 'Administrator' profile.
SVN:trunk[5298]
2018-01-30 15:17:51 +00:00
Romain Quetiez
bfadbc4098
Prerequisites for custom fields
...
SVN:trunk[3918]
2016-02-19 12:30:19 +00:00
Romain Quetiez
3be0bc8ca8
Improved the User Rights management API:
...
- new verbs: HasProfile and ListProfiles
- doing less queries (no need for listing all the profiles, caching the user profiles into the SESSION cookie
- did some code cleanup (unused variables)
SVN:trunk[3852]
2015-12-15 20:30:30 +00:00
Denis Flaven
1f2ad9ecdb
Demo mode: prevent the deletion of Users...
...
SVN:trunk[3452]
2014-12-04 10:02:14 +00:00
Romain Quetiez
165d01e2a2
Legacy user rights management: allow the deletion of a profile in one step (it was nearly impossible because of the numerous related records, mainly of type URP_ActionGrant, for which iTop was requesting a manual deletion)
...
SVN:trunk[3277]
2014-07-16 10:48:08 +00:00
Romain Quetiez
f89792e171
Demo mode: the profiles must be in read-only mode (it is not enough to have the users in read-only)
...
SVN:trunk[3203]
2014-06-10 11:50:20 +00:00
Romain Quetiez
6f90d626fc
Code refactoring: MakeSelectFilter
...
SVN:trunk[3015]
2013-12-03 09:56:46 +00:00
Romain Quetiez
721faa7e1e
Updated copyright (2012) and license (LGPL changed to AGPL)
...
SVN:trunk[2333]
2012-10-23 21:41:36 +00:00
Denis Flaven
06aef10f25
Imported the "old" addon from the 1.2 branch
...
SVN:trunk[2245]
2012-10-10 09:49:58 +00:00
Romain Quetiez
7dbbb1c299
#439 Record and display changes in the link sets (ex: Members of a team)
...
#439 Make sure that changes made by a plugin get recorded
+ simplified the change tracking for the plugins. Simply call DBObject::DBInsert (resp. Update and Delete) and the change will be recorded for the current page. This is compatible with the old (not mandatory anymore) way that was requiring DBInsertTracked APIs (resp. Update, Delete).
SVN:trunk[2236]
2012-10-08 12:17:56 +00:00
Romain Quetiez
645b2f5ad8
Profiles defined in XML: fixed regression preventing from creating an object
...
SVN:trunk[2185]
2012-09-17 07:49:00 +00:00
Romain Quetiez
083c3d8613
Profiles defined in XML: reviewed the internal extension capability (GetReadOnlyAttributes and GetPredefinedObjects)
...
SVN:trunk[2152]
2012-08-21 13:25:32 +00:00
Romain Quetiez
38cca0c144
Profiles defined in XML (setup + runtime), beta version (stable, upgrade required)
...
SVN:trunk[2149]
2012-08-14 16:06:51 +00:00
Romain Quetiez
1e97829d7d
Fixed regression (See #556 ) due to the existence of an overload of the protected API GetUserOrgs, reintegrated from branch 1.2.1
...
SVN:trunk[2101]
2012-06-14 09:12:56 +00:00
Romain Quetiez
47f13d6b70
#556 Merged in trunk
...
SVN:trunk[2084]
2012-06-05 15:49:31 +00:00
Denis Flaven
453da6be38
- Bug fix: the hierarchical key in Organizations is not always named 'parent_id' !
...
SVN:trunk[1869]
2012-02-27 16:25:14 +00:00
Romain Quetiez
b3dadcba77
Reintegrated from branch 1.2: capability to develop a module to share objects between organizations (beta)
...
SVN:trunk[1859]
2012-02-17 15:11:00 +00:00
Denis Flaven
d252d767b6
Initializes the admin contact's phone number, in case it is a mandatory field in the data model...
...
SVN:trunk[1622]
2011-09-30 08:01:17 +00:00
Denis Flaven
c4db9cd84e
More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes
...
SVN:trunk[1563]
2011-09-08 13:21:32 +00:00
Romain Quetiez
c74c955973
Internal: it is possible to override the user authorized organizations
...
SVN:trunk[1516]
2011-08-25 15:45:45 +00:00
Denis Flaven
905d9b5931
Apply organization filtering to subclasses of Organization as well.
...
SVN:trunk[1502]
2011-08-24 13:54:27 +00:00
Erwan Taloc
795296e6e3
update after test made by Erwan
...
SVN:trunk[1493]
2011-08-23 07:13:28 +00:00
Denis Flaven
48d66447b7
Support an abstract "Organization" class: if it's the case don't create any Org neither Person during the setup.
...
SVN:trunk[1490]
2011-08-22 10:06:48 +00:00
Romain Quetiez
e8586515e3
Fixed regression (HKeys)
...
SVN:trunk[1474]
2011-08-19 08:51:16 +00:00
Denis Flaven
1c7d5b8fd2
Added support for an abstract Organization (or Person) class during setup !
...
SVN:trunk[1461]
2011-08-17 15:20:32 +00:00
Denis Flaven
c85feb7cea
- Use the new HierarchicalKeys for Organization and Locations and use the hierarchy of organization for the profiles/user rights.
...
SVN:trunk[1382]
2011-07-28 15:14:49 +00:00
Romain Quetiez
645b02b2d1
#415 Could not limit user on some organization (symptom: wrong queries... org_id does not exist...)
...
SVN:trunk[1319]
2011-07-01 15:08:38 +00:00
Denis Flaven
6e685feb9f
Fixed the creation of the "Portal" profile that now behaves like a standard profile and therefore requires the proper rights.
...
SVN:trunk[1216]
2011-04-13 13:11:51 +00:00
Romain Quetiez
b423e98295
Optimizations:
...
- Setup: grouped CREATE TABLE / ALTER TABLE statements in one single CREATE table
- Every page: cache the prepared queries and data model into APC
Cleanup: removed unused verb RegisterPlugin
Fix: GetObject could fail (could not find the reference from within the forum)
SVN:trunk[1154]
2011-03-30 08:30:42 +00:00
Romain Quetiez
d4bfa4c48f
Optimization in the setup: 10 queries to insert the 1500 action grant records
...
SVN:trunk[1152]
2011-03-29 14:28:47 +00:00
Denis Flaven
45134e182d
Fixed Trac#313: Provider contracts are filtered on the 'provider_id' - for filtering in the UI via the drop-down list of Organizations and for the security profiles ("Allowed Organizations"). The mapping for 'org_id', if any, is now taken into account by the security.
...
SVN:trunk[1120]
2011-03-08 12:31:16 +00:00
Romain Quetiez
019888caff
#305 Specified the charset in any call to htmlentities()
...
SVN:trunk[1110]
2011-03-07 16:43:20 +00:00
Denis Flaven
6a72ceb685
Patch for supporting a data model without any Person.
...
SVN:trunk[1019]
2010-12-07 15:24:16 +00:00
Denis Flaven
5ff5e3f1a7
Patch for supporting a data model without any Person.
...
SVN:trunk[1016]
2010-12-07 15:06:17 +00:00
Denis Flaven
e3caff6689
Patch for supporting a data model without any Organization.
...
SVN:trunk[1015]
2010-12-07 14:55:40 +00:00
Denis Flaven
53d5867b93
Patch to support a different data model where contacts are not part of an org
...
SVN:trunk[1006]
2010-12-03 09:10:15 +00:00
Romain Quetiez
7d13ec00e4
User profiles: created in dedicated module itop-profiles-itil
...
SVN:trunk[980]
2010-11-26 15:55:38 +00:00
Denis Flaven
8c3344d9c2
Bug fix: create the admin accounts with its linked profile (admin) in one operations since profiles are now mandatory when creating/updating a user.
...
SVN:trunk[870]
2010-09-14 10:43:50 +00:00
Romain Quetiez
0c4a030e2a
Improved security
...
SVN:trunk[809]
2010-09-10 11:59:04 +00:00
Romain Quetiez
1d1c7b44c5
Fixed bug: losing links profiles/user when editing profiles
...
SVN:trunk[802]
2010-09-09 14:15:32 +00:00
Romain Quetiez
5f497a55de
New profile: Portal User (and link from a ticket to the user portal)
...
SVN:trunk[801]
2010-09-09 13:47:22 +00:00
Romain Quetiez
2aed08ccd3
#255 Added the profile "Problem Manager"
...
SVN:trunk[788]
2010-09-07 10:14:35 +00:00
Romain Quetiez
de5d345e4e
Grant Summary on profiles was saying no for everything
...
SVN:trunk[786]
2010-09-06 20:01:58 +00:00
Romain Quetiez
5b728dc6b8
#251 Allow configuration managers to modify/delete Contacts
...
SVN:trunk[785]
2010-09-06 16:56:54 +00:00
Romain Quetiez
73975a9531
Simplified user management by profile (optimization for viewing a huge list of objects)
...
SVN:trunk[779]
2010-09-06 14:42:57 +00:00
Romain Quetiez
e31e23df7a
Could not search on Contacts while being allowed to search on persons/teams
...
SVN:trunk[739]
2010-09-02 05:50:40 +00:00
Romain Quetiez
b7131ba4db
Improved the internal KPI reporting tools
...
SVN:trunk[722]
2010-08-30 22:14:04 +00:00