Romain Quetiez
6a9ea25b27
Setup based on either compiled modules or xml datamodel files (or both).
...
SetupWebPage is an alias for ModuleDiscovery and the module files should be updated progressively to invoke ModuleDiscovery::AddModule() instead.
The implementation of the module still assumes they are in the directory 'modules'... this has to be changed later to ensure the distinction between the source modules and the executed modules
SVN:trunk[1758]
2012-01-11 15:04:15 +00:00
Denis Flaven
f29d673ffb
Added self-registering / user synchronization extensibility
...
SVN:trunk[1756]
2012-01-11 11:17:08 +00:00
Denis Flaven
cf65b58981
Make sure that the path/href base is correct to display the page (images, CSS...)
...
SVN:trunk[1755]
2012-01-09 08:57:48 +00:00
Denis Flaven
8231420c44
- New way to handle sessions compatible with multiple environments
...
SVN:trunk[1710]
2011-12-08 15:37:48 +00:00
Denis Flaven
f17f4e1f78
Use the default language when creating a new user from CAS
...
SVN:trunk[1697]
2011-11-29 15:54:53 +00:00
Denis Flaven
a94ccb9091
Support patterns for the definition of casMemberOf groups.
...
SVN:trunk[1695]
2011-11-29 15:31:04 +00:00
Denis Flaven
cbafb5f1d1
Automatic synchro of CAS users
...
SVN:trunk[1625]
2011-10-03 13:54:58 +00:00
Romain Quetiez
a3a94cccbb
#484 Fixed issue with IIS ("Wrong password" at first prompt)
...
SVN:trunk[1609]
2011-09-28 12:55:15 +00:00
Denis Flaven
c4db9cd84e
More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes
...
SVN:trunk[1563]
2011-09-08 13:21:32 +00:00
Romain Quetiez
06e9bd0c25
#446 XSS vector on the login web page
...
SVN:trunk[1561]
2011-09-08 10:28:14 +00:00
Denis Flaven
6859326646
Fixed Trac#446: XSS vulnerabilities... to be tested !
...
Also fixed the display/download links on documents that were both doing exactly the same thing !
SVN:trunk[1443]
2011-08-11 10:17:03 +00:00
Denis Flaven
ff89c4d424
CAS authentication improvements:
...
- Check if the user is part of a group (memberOf)
- Fixed the use of the 'redirect_service' when logging-out
SVN:trunk[1384]
2011-07-28 17:39:49 +00:00
Denis Flaven
ecca1aa070
Use absolute URLs as much as possible to be independent from the page being executed...
...
SVN:trunk[1365]
2011-07-26 13:22:45 +00:00
Denis Flaven
3ab670e8c2
Implemented two new options for CAS:
...
- logout_redirect_service
- memberOf
SVN:trunk[1362]
2011-07-26 09:42:46 +00:00
Romain Quetiez
c4b7497770
#423 Fixed issues with application root URL = f(mode CLI, modules, web server techno, etc.)
...
SVN:trunk[1304]
2011-06-28 10:30:03 +00:00
Denis Flaven
733953ac99
CAS integration: added support of JA-SIG Central Authentication Service (CAS) with log-off support, using phpCAS API.
...
SVN:trunk[1280]
2011-06-10 14:51:17 +00:00
Denis Flaven
d48fd1a12e
First prototype (not yet tested) of CAS integration.
...
SVN:trunk[1276]
2011-06-08 13:34:43 +00:00
Denis Flaven
5ad7ea1b7b
Fixed Trac #365 : Give the user some feedback when the password was successfully changed/set. Note that iTop does not check that the new password is different from the old one.
...
SVN:trunk[1147]
2011-03-24 17:34:00 +00:00
Denis Flaven
2d65325f6f
New configuration setting (and new class of Log objects) to keep track of the application's usage: an entry in the log is added each time a user connects to the application. (This feature is disabled by default)
...
SVN:trunk[1073]
2011-02-07 15:55:39 +00:00
Denis Flaven
fde336d8dd
Cosmetics: make the login & change password form look the same on all browsers.
...
SVN:trunk[1053]
2011-01-18 09:07:46 +00:00
Denis Flaven
6338775506
Split the usage of the iTop logo: one logo to be displayed internally (once logged) one externally (login/logoff).
...
SVN:trunk[1021]
2010-12-08 09:43:56 +00:00
Romain Quetiez
cde184e2a3
Allow a module to provide a handler to override application settings: OnMetaModelStarted()
...
SVN:trunk[1010]
2010-12-06 09:14:20 +00:00
Romain Quetiez
d8bb6a45b2
REVIEWED THE FILE INCLUSION POLICY
...
- includes are relative to the application root folder, aka APPROOT
- changed the config file, while preserving the compatibility with older installs
SVN:trunk[962]
2010-11-22 17:53:52 +00:00
Romain Quetiez
248cdcea8c
#286 Issue with HTTPS - reviewed the fix implemented in [896]
...
SVN:trunk[931]
2010-10-28 12:55:51 +00:00
Denis Flaven
006453678b
Fixed Trac#300: each iTop instance now uses its own name for the cookie storing the session ID. Therefore several instances can coexist independently on the same server.
...
SVN:trunk[913]
2010-10-22 06:09:51 +00:00
Denis Flaven
f120e21e00
Code cleanup: proper usage of the ReadParam function.
...
SVN:trunk[814]
2010-09-10 14:11:30 +00:00
Denis Flaven
463e7b5413
- Enhancement (Trac#189) first version of a (simple) End-Users portal.
...
- Fix for the appUserPreferences class
SVN:trunk[806]
2010-09-10 10:10:57 +00:00
Romain Quetiez
5070dd2abe
#260 Restrict some pages to administrators
...
SVN:trunk[800]
2010-09-09 05:44:18 +00:00
Denis Flaven
4c789e8fbb
- Fixed bug #102 : regression introduced with the encoding of passwords: users were no longer able to change their own password...
...
SVN:trunk[778]
2010-09-06 11:36:11 +00:00
Denis Flaven
73458617bf
- Integrated fix for patch #188 - ForceHttps = SecureConnectionRequired
...
SVN:trunk[670]
2010-08-10 16:53:28 +00:00
Denis Flaven
5b0c1e3003
- Integrated all the authentications methods and various logon methods...
...
SVN:trunk[669]
2010-08-10 16:38:55 +00:00
Denis Flaven
272387d61e
- Integrated all the authentications methods and various logon methods...
...
SVN:trunk[665]
2010-08-09 10:19:14 +00:00
Denis Flaven
40913af0f6
- Check consistency of the retyped password when changing password
...
SVN:trunk[533]
2010-07-02 12:58:09 +00:00
Denis Flaven
aa3357fe78
Fixed bug #102 : allow users to change their password.
...
SVN:trunk[532]
2010-07-02 11:23:59 +00:00
Denis Flaven
3392f30e6e
- Cosmetics: aligning the style in the different pages, make the iTop logo clickable, etc...
...
- Handle persistent user preferences: for now only the menu status (open/closed) and its width. In the future the status of lists (open/closed, which columns to show...) can be considered as well.
SVN:trunk[487]
2010-06-25 16:27:44 +00:00
Romain Quetiez
a0e0371812
#19 - Reviewed the licensing information and started to align the comments in the code
...
SVN:trunk[422]
2010-05-24 09:24:35 +00:00
Romain Quetiez
4a5b004c0f
Cosmetics on the login page
...
SVN:trunk[376]
2010-04-30 08:31:08 +00:00
Denis Flaven
37ab9d4512
- Implementation of the localization... on going...
...
SVN:trunk[370]
2010-04-29 16:39:53 +00:00
Romain Quetiez
1bdfbbb284
Localization: cleanup in the DataModel + aligned some API (e.g. GetStateLabel)
...
SVN:trunk[348]
2010-04-20 09:21:46 +00:00
Denis Flaven
37ccd94828
Enhancement : new configuration option (secure_conenction_required) to force the use of HTTPS to connect to iTop. The redirection http -> https is still buggy but the usage of https is enforced anyway.
...
SVN:trunk[324]
2010-04-12 12:19:12 +00:00
Romain Quetiez
1237fb92d5
Fixed #82 , could not use wget due to a conflict with page argument 'operation'
...
SVN:trunk[294]
2010-01-29 18:22:00 +00:00
Denis Flaven
0a413a32f6
Renaming of the WebPage class (and its derived classes) to stick to the same naming convention as other classes.
...
SVN:trunk[250]
2010-01-17 09:07:10 +00:00
Romain Quetiez
c7bc7ce95f
Added a logoff button
...
SVN:trunk[124]
2009-09-09 15:06:14 +00:00
Denis Flaven
12e433846f
session_is_register is deprecated since PHP 5.3.0
...
SVN:trunk[94]
2009-08-21 13:57:38 +00:00
Denis Flaven
b756db0992
Moved under "trunk" to be able to track releases under "tags"
...
SVN:trunk[55]
2009-04-28 09:03:12 +00:00