Commit Graph

115 Commits

Author SHA1 Message Date
odain-cbd
8ab38854a8 N°4920 - Fix "undefined index" notice in user rights (#271) 2022-03-08 18:21:40 +01:00
Eric
328ec52c88 N°3162 - Remove default admin phone number (can be incompatible with validation pattern) 2020-08-31 11:38:24 +02:00
Molkobain
4400cfde62 N°2313 - Markup extensibility: Update usages of admin. console tabs to have codes and titles 2020-01-15 08:42:35 +01:00
Pierre Goiffon
24eb82d140 N°2361 Deprecate DB*Tracked methods
* update methods PHPDoc
* DBInsertTracked update callers
* DBInsertTrackedNoReload update callers
* DBUpdateTracked update callers
* DBDeleteTracked update callers
2019-11-15 17:56:04 +01:00
Pierre Goiffon
40a4e6d7b0 Fix files using CrLf, convert them to Lf to have the whole repo using Lf
Warn your git config (core.autocrlf = input or true)
2018-09-04 17:59:51 +02:00
Denis Flaven
d21d732545 Do not check if the organizations are allowed if there is no user logged in (use case: automatic synchro of users at connection time)
SVN:trunk[5930]
2018-07-05 12:54:58 +00:00
Vincent Dumas
9e17a611d2 Add 'name' and 'description' as default search criteria on QueryPhrase, Audit Category and Profile. Enable search bar on Profile and Audit Category menus.
SVN:trunk[5907]
2018-06-25 11:06:52 +00:00
Eric Espié
a848cb28f1 N°1436 - Access control updated for grant_by_profile categories of classes -
Fix access to internal classes form the core engine

SVN:trunk[5903]
2018-06-22 16:07:35 +00:00
Stephen Abello
fdb439f054 N°1520 : URP_Profiles now has a default search criteria
SVN:trunk[5897]
2018-06-21 13:22:01 +00:00
Eric Espié
c3fbdc907c N°1248 - User Management: Check organization related to the current user
SVN:trunk[5677]
2018-04-17 10:22:12 +00:00
Eric Espié
85a5ddb980 N°478 - Customizable access to the 'Admin Tools'
- Display additional rights (grant_by_profile) in the grant matrix

SVN:trunk[5367]
2018-02-26 10:38:09 +00:00
Eric Espié
d65bd97956 N°478 - Customizable access to the 'Admin Tools'
SVN:trunk[5364]
2018-02-23 11:13:07 +00:00
Eric Espié
94d45fc77f N°1248 - User Management Portal
* Added a new grant_by_profile category that allows to manage certain classes in addition to bizmodel with user profiles.
* The following classes have the new grant_by_profile category:
    User, UserInternal, UserLocal, UserLDAP, UserExternal, URP_UserProfile, URP_UserOrg
* For these classes, it is possible to manage access rights with user profiles for non-administrators.
* For these classes, the default behavior of SELECT requests changes from allowed to forbidden.
* For user profiles, the default behavior '*' is limited to the bizmodel category to keep the previous behavior of profiles, i. e. for classes in the grant_by_profile category, rights (including READ) must be given explicitly.
* New constraints have been added, so only an administrator can manage (attach or detach) the 'Administrator' profile.

SVN:trunk[5298]
2018-01-30 15:17:51 +00:00
Romain Quetiez
bfadbc4098 Prerequisites for custom fields
SVN:trunk[3918]
2016-02-19 12:30:19 +00:00
Romain Quetiez
3be0bc8ca8 Improved the User Rights management API:
- new verbs: HasProfile and ListProfiles
- doing less queries (no need for listing all the profiles, caching the user profiles into the SESSION cookie
- did some code cleanup (unused variables)

SVN:trunk[3852]
2015-12-15 20:30:30 +00:00
Denis Flaven
1f2ad9ecdb Demo mode: prevent the deletion of Users...
SVN:trunk[3452]
2014-12-04 10:02:14 +00:00
Romain Quetiez
f89792e171 Demo mode: the profiles must be in read-only mode (it is not enough to have the users in read-only)
SVN:trunk[3203]
2014-06-10 11:50:20 +00:00
Romain Quetiez
6f90d626fc Code refactoring: MakeSelectFilter
SVN:trunk[3015]
2013-12-03 09:56:46 +00:00
Romain Quetiez
721faa7e1e Updated copyright (2012) and license (LGPL changed to AGPL)
SVN:trunk[2333]
2012-10-23 21:41:36 +00:00
Romain Quetiez
7dbbb1c299 #439 Record and display changes in the link sets (ex: Members of a team)
#439 Make sure that changes made by a plugin get recorded
+ simplified the change tracking for the plugins. Simply call DBObject::DBInsert (resp. Update and Delete) and the change will be recorded for the current page. This is compatible with the old (not mandatory anymore) way that was requiring DBInsertTracked APIs (resp. Update, Delete).

SVN:trunk[2236]
2012-10-08 12:17:56 +00:00
Romain Quetiez
645b2f5ad8 Profiles defined in XML: fixed regression preventing from creating an object
SVN:trunk[2185]
2012-09-17 07:49:00 +00:00
Romain Quetiez
083c3d8613 Profiles defined in XML: reviewed the internal extension capability (GetReadOnlyAttributes and GetPredefinedObjects)
SVN:trunk[2152]
2012-08-21 13:25:32 +00:00
Romain Quetiez
38cca0c144 Profiles defined in XML (setup + runtime), beta version (stable, upgrade required)
SVN:trunk[2149]
2012-08-14 16:06:51 +00:00
Romain Quetiez
1e97829d7d Fixed regression (See #556) due to the existence of an overload of the protected API GetUserOrgs, reintegrated from branch 1.2.1
SVN:trunk[2101]
2012-06-14 09:12:56 +00:00
Romain Quetiez
47f13d6b70 #556 Merged in trunk
SVN:trunk[2084]
2012-06-05 15:49:31 +00:00
Denis Flaven
453da6be38 - Bug fix: the hierarchical key in Organizations is not always named 'parent_id' !
SVN:trunk[1869]
2012-02-27 16:25:14 +00:00
Romain Quetiez
b3dadcba77 Reintegrated from branch 1.2: capability to develop a module to share objects between organizations (beta)
SVN:trunk[1859]
2012-02-17 15:11:00 +00:00
Denis Flaven
d252d767b6 Initializes the admin contact's phone number, in case it is a mandatory field in the data model...
SVN:trunk[1622]
2011-09-30 08:01:17 +00:00
Denis Flaven
c4db9cd84e More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes
SVN:trunk[1563]
2011-09-08 13:21:32 +00:00
Romain Quetiez
c74c955973 Internal: it is possible to override the user authorized organizations
SVN:trunk[1516]
2011-08-25 15:45:45 +00:00
Denis Flaven
905d9b5931 Apply organization filtering to subclasses of Organization as well.
SVN:trunk[1502]
2011-08-24 13:54:27 +00:00
Erwan Taloc
795296e6e3 update after test made by Erwan
SVN:trunk[1493]
2011-08-23 07:13:28 +00:00
Denis Flaven
48d66447b7 Support an abstract "Organization" class: if it's the case don't create any Org neither Person during the setup.
SVN:trunk[1490]
2011-08-22 10:06:48 +00:00
Romain Quetiez
e8586515e3 Fixed regression (HKeys)
SVN:trunk[1474]
2011-08-19 08:51:16 +00:00
Denis Flaven
1c7d5b8fd2 Added support for an abstract Organization (or Person) class during setup !
SVN:trunk[1461]
2011-08-17 15:20:32 +00:00
Denis Flaven
c85feb7cea - Use the new HierarchicalKeys for Organization and Locations and use the hierarchy of organization for the profiles/user rights.
SVN:trunk[1382]
2011-07-28 15:14:49 +00:00
Romain Quetiez
645b02b2d1 #415 Could not limit user on some organization (symptom: wrong queries... org_id does not exist...)
SVN:trunk[1319]
2011-07-01 15:08:38 +00:00
Denis Flaven
6e685feb9f Fixed the creation of the "Portal" profile that now behaves like a standard profile and therefore requires the proper rights.
SVN:trunk[1216]
2011-04-13 13:11:51 +00:00
Romain Quetiez
b423e98295 Optimizations:
- Setup: grouped CREATE TABLE / ALTER TABLE statements in one single CREATE table
- Every page: cache the prepared queries and data model into APC
Cleanup: removed unused verb RegisterPlugin
Fix: GetObject could fail (could not find the reference from within the forum)

SVN:trunk[1154]
2011-03-30 08:30:42 +00:00
Romain Quetiez
d4bfa4c48f Optimization in the setup: 10 queries to insert the 1500 action grant records
SVN:trunk[1152]
2011-03-29 14:28:47 +00:00
Denis Flaven
45134e182d Fixed Trac#313: Provider contracts are filtered on the 'provider_id' - for filtering in the UI via the drop-down list of Organizations and for the security profiles ("Allowed Organizations"). The mapping for 'org_id', if any, is now taken into account by the security.
SVN:trunk[1120]
2011-03-08 12:31:16 +00:00
Romain Quetiez
019888caff #305 Specified the charset in any call to htmlentities()
SVN:trunk[1110]
2011-03-07 16:43:20 +00:00
Denis Flaven
6a72ceb685 Patch for supporting a data model without any Person.
SVN:trunk[1019]
2010-12-07 15:24:16 +00:00
Denis Flaven
5ff5e3f1a7 Patch for supporting a data model without any Person.
SVN:trunk[1016]
2010-12-07 15:06:17 +00:00
Denis Flaven
e3caff6689 Patch for supporting a data model without any Organization.
SVN:trunk[1015]
2010-12-07 14:55:40 +00:00
Denis Flaven
53d5867b93 Patch to support a different data model where contacts are not part of an org
SVN:trunk[1006]
2010-12-03 09:10:15 +00:00
Romain Quetiez
7d13ec00e4 User profiles: created in dedicated module itop-profiles-itil
SVN:trunk[980]
2010-11-26 15:55:38 +00:00
Denis Flaven
8c3344d9c2 Bug fix: create the admin accounts with its linked profile (admin) in one operations since profiles are now mandatory when creating/updating a user.
SVN:trunk[870]
2010-09-14 10:43:50 +00:00
Romain Quetiez
0c4a030e2a Improved security
SVN:trunk[809]
2010-09-10 11:59:04 +00:00
Romain Quetiez
1d1c7b44c5 Fixed bug: losing links profiles/user when editing profiles
SVN:trunk[802]
2010-09-09 14:15:32 +00:00