Romain Quetiez 9e702899f2 Fixed a security hole: any user was allowed to edit users and profiles, and therefore could give himself admin rights - now, only admins are allowed to do that ...

Also added a debugging capability: user rights shown for any object class, on demand in URP_Users::DisplayBareRelations()

SVN:trunk[178]

2009-09-17 15:50:28 +00:00

..

oql

Added INET_ATON and INET_NTOA verbs to the OQL, and allowed carrier returns chars (\r) in the OQL (same as a whitespace)

2009-09-11 12:38:46 +00:00

archive.class.inc.php

Moved under "trunk" to be able to track releases under "tags"

2009-04-28 09:03:12 +00:00

attributedef.class.inc.php

Added the validation of mandatory form fields before submitting the creation / modification / clone forms.

2009-09-11 06:01:32 +00:00

bulkchange.class.inc.php

Cosmetics on the bulk load (followed new test plan)

2009-09-14 16:06:04 +00:00

cmdbchange.class.inc.php

Moved under "trunk" to be able to track releases under "tags"

2009-04-28 09:03:12 +00:00

cmdbchangeop.class.inc.php

Hyperlinks in the history logs presentation

2009-09-14 08:38:52 +00:00

cmdbobject.class.inc.php

Revised the CSV import: fixed issues with the external keys, added hyperlinks to the found objects, obsoleted the word 'pkey', replaced by 'id'

2009-09-14 08:37:10 +00:00

cmdbsource.class.inc.php

Work in progress for integration of "allowed values"

2009-09-11 15:33:06 +00:00

config.class.inc.php

- Do NOT rely on PHP short open tags, for a better compatibility

2009-08-22 09:52:12 +00:00

coreexception.class.inc.php

Latest data model (Erwan) and few cosmetic changes (safer display of object hyperlinks)

2009-09-07 14:29:49 +00:00

csvparser.class.inc.php

Moved under "trunk" to be able to track releases under "tags"

2009-04-28 09:03:12 +00:00

data.generator.class.inc.php

Moved under "trunk" to be able to track releases under "tags"

2009-04-28 09:03:12 +00:00

dbobject.class.php

Revised the CSV import: fixed issues with the external keys, added hyperlinks to the found objects, obsoleted the word 'pkey', replaced by 'id'

2009-09-14 08:37:10 +00:00

dbobjectsearch.class.php

Finalization of the user management by profile (UI to manage the accounts), and some unrelated changes:

2009-09-04 15:22:40 +00:00

dbobjectset.class.php

Finalized the module "user rights by profile". It is fully integrated with the application setup (inc. sample data). and it it now ready for developing the user management GUI

2009-08-20 13:09:41 +00:00

expression.class.inc.php

Finalization of the user management by profile (UI to manage the accounts), and some unrelated changes:

2009-09-04 15:22:40 +00:00

filterdef.class.inc.php

Finalization of the user management by profile (UI to manage the accounts), and some unrelated changes:

2009-09-04 15:22:40 +00:00

metamodel.class.php

Fixed regression: server status was reset

2009-09-16 07:53:12 +00:00

MyHelpers.class.inc.php

Moved under "trunk" to be able to track releases under "tags"

2009-04-28 09:03:12 +00:00

sqlquery.class.inc.php

Finalized the module "user rights by profile". It is fully integrated with the application setup (inc. sample data). and it it now ready for developing the user management GUI

2009-08-20 13:09:41 +00:00

stimulus.class.inc.php

Moved under "trunk" to be able to track releases under "tags"

2009-04-28 09:03:12 +00:00

test.class.inc.php

Moved under "trunk" to be able to track releases under "tags"

2009-04-28 09:03:12 +00:00

userrights.class.inc.php

Fixed a security hole: any user was allowed to edit users and profiles, and therefore could give himself admin rights - now, only admins are allowed to do that

2009-09-17 15:50:28 +00:00

valuesetdef.class.inc.php

Finalization of the user management by profile (UI to manage the accounts), and some unrelated changes:

2009-09-04 15:22:40 +00:00