Commit Graph

17 Commits

Author SHA1 Message Date
Romain Quetiez
2e9f13c4c5 Deletion of objects:
- automatic delete of mandatory ext keys, and if the option is set in the data model (I've set the "manual" option by default, and the "auto" option for links)
- automatic reset of optional ext keys (several keys could be updated on one single object)
- takes into account the user rights
- security against the use of page arguments when the automatic deletion is not allowed
Known limitations:
- does not check that resetting an ext key could affect the lifecycle consistency (e.g. delete a workgroup referenced by a ticket)
- does not check recursively on the automatic deletion, which should not be a problem given the current data model (TBC)

SVN:code[181]
2009-09-18 16:12:38 +00:00
Romain Quetiez
c641161e17 Fixed a security hole: any user was allowed to edit users and profiles, and therefore could give himself admin rights - now, only admins are allowed to do that
Also added a debugging capability: user rights shown for any object class, on demand in URP_Users::DisplayBareRelations()

SVN:code[178]
2009-09-17 15:50:28 +00:00
Romain Quetiez
d299fd451a Fixed regression on access control for the stimuli (also ipmlemented a workaround to a bug with the mantatory link attributes)
SVN:code[177]
2009-09-17 13:38:25 +00:00
Romain Quetiez
abbc21b0cb Fixed bug when creating a login (flush privileges = reset the data cache)
SVN:code[175]
2009-09-17 12:50:33 +00:00
Romain Quetiez
103f5e4568 User Management: removed limitation on the user rights that could not be established without a given object set, and added a feedback in the user details page (grant summary, based on the results returned by the std user management API, thus is reliable)
SVN:code[169]
2009-09-16 16:01:12 +00:00
Romain Quetiez
4496dad999 Cosmetic: display the stimulus label in the profile grants sumary
SVN:code[157]
2009-09-14 08:55:41 +00:00
Romain Quetiez
bfc2df25d7 Fixed issue: user always considered as being an admin (regression due to changes in the setup), user profile setup is finally done at 100% in the setup code.
SVN:code[128]
2009-09-10 10:58:45 +00:00
Romain Quetiez
e0c7620560 Improved the run query page: added meaningfull examples, including "ticket of the user currently logged in", and did some cosmetics on the page (examples shown in a drawer) ; needed to add some options to the OQL (date intervals)
SVN:code[122]
2009-09-08 15:10:31 +00:00
Romain Quetiez
ab801850dd Latest data model (Erwan) and few cosmetic changes (safer display of object hyperlinks)
SVN:code[119]
2009-09-07 14:29:49 +00:00
Romain Quetiez
6c286bf952 Finalization of the user management by profile (UI to manage the accounts), and some unrelated changes:
- Using class labels in the UI
- Data model: you may specify a set of allowed values from a query (see caller_id in bizIncident class), still not 100% used in the UI but does not generate any error
- Data model: you may specify a password field (AttributePassword replacing AttributeString)
- Setup: calling UserRight::Setup() right after calling UserRight::CreateAdministrator()
- Setup: administrator account created with "my organization" and a dedicated contact
- Menus: optimized the load of std menus (queries written in OQL to get the benefit of the query cache)
- Menus: admin tools, seen only by people having the "admin" profile
- Object edition: fixed bug with the display of N-N links in the form

SVN:code[110]
2009-09-04 15:22:40 +00:00
Romain Quetiez
2221709cc3 Finalized the module "user rights by profile". It is fully integrated with the application setup (inc. sample data). and it it now ready for developing the user management GUI
SVN:code[93]
2009-08-20 13:09:41 +00:00
Romain Quetiez
80a0d27cb0 User management by profile ready for integration with the UI
and some caching has been implemented for the building of queries (both from an OQL or from a programmatic query)

SVN:code[90]
2009-07-31 13:18:44 +00:00
Romain Quetiez
367e678ff9 User management by profile moving forward: pages to check the projection of objects/users in user defined dimensions
Introduced parameters in OQL (:myvar)
Added the verb MetaModel::IsValidObject($oMyObj)

SVN:code[88]
2009-07-24 13:14:51 +00:00
Romain Quetiez
6659728058 Initialized dev of the user rights managed by profiles, it is still not usable by the application, but its data model is likely to be stable.
SVN:code[87]
2009-07-21 08:48:30 +00:00
Denis Flaven
4eb723b073 - reintegrated the changes (mostly bug fixes) from the 0.7.2 branch
SVN:code[83]
2009-07-18 17:24:25 +00:00
Denis Flaven
0126c1322e Fixed bugs linked to the bookmark creation:
- There must be a user specific menu entry in the list of menuNodes
- The asynchronous ajax page must use the authentication stored in the session
- The query must be stored in OQL instead of sibusQL

SVN:code[58]
2009-04-28 13:24:12 +00:00
Denis Flaven
6545595f19 Moved under "trunk" to be able to track releases under "tags"
SVN:code[55]
2009-04-28 09:03:12 +00:00