- 12 Jul, 2022 1 commit
-
-
dockx thibault authored
Fixing codestyle
-
- 17 Jan, 2019 1 commit
-
-
Côme Chilliet authored
issue #5942
-
- 02 Sep, 2018 1 commit
-
-
Benoit Mortier authored
Signed-off-by:
Benoit Mortier <benoit.mortier@opensides.be>
-
- 21 Mar, 2018 4 commits
-
-
Côme Chilliet authored
Resolve "Listing objects should check ACL on attributes" See merge request fusiondirectory/fd!79 (cherry picked from commit 9154c4bd) 06ae0efc
feat(objects): Add $checkAcl option on count method as well -
Côme Chilliet authored
Resolve "Listing objects should check ACL on attributes" See merge request fusiondirectory/fd!78 (cherry picked from commit 12d02686) f88790fe
fix(objects): Rename var which was hiding an other one -
Côme Chilliet authored
Resolve "Listing objects should check ACL on attributes" See merge request fusiondirectory/fd!77 (cherry picked from commit 5e9ea3d0) 8c7e4243
fix(objects): Fixed PHP error in objects::ls -
Côme Chilliet authored
Resolve "Listing objects should check ACL on attributes" See merge request fusiondirectory/fd!75 (cherry picked from commit e9d7d29a) 82fa5126
fix(acl): Checking attributes ACL in objects::ls 893d827c fix(acl): Checking ACL on attributes used in filters
-
- 13 Feb, 2018 1 commit
-
-
Côme Chilliet authored
issue #5775
-
- 12 Dec, 2017 1 commit
-
-
Côme Chilliet authored
-
- 05 Dec, 2017 1 commit
-
-
Côme Chilliet authored
Now there is an ACL you can put in any ACL role to give access to the dashboard. And all searches from the dashboard are checking ACL and returning info only on the data you are allowed to see. Plugins providing a dashboard tab will have to be adapted as well issue #5734
-
- 20 Nov, 2017 1 commit
-
-
Côme Chilliet authored
This adds an option to check ACLs on filter for count method. It will be used by webservice plugin. issue #5732
-
- 15 Nov, 2017 1 commit
-
-
Côme Chilliet authored
Two vars were named acl and were colliding, resulting in bugs issue #5732
-
- 14 Nov, 2017 3 commits
-
-
Côme Chilliet authored
issue #5732
-
Côme Chilliet authored
objects::ls will now check that the calling user is allowed to read the attributes used in the filter. This will avoid information leak through webservice or custom filter. issue #5732
-
Côme Chilliet authored
Took code from webservice to include directly in objects class. The point is to make sure objects::ls is not used to see attributes that the calling user is not allowed to see. The same kind of check should be done for the attributes used in the filter. Maybe a bypass should be added later to allow "admins" to use operational attributes and other LDAP attributes which does not match an ACL. issue #5732
-
- 24 Oct, 2017 2 commits
-
-
Côme Chilliet authored
This allows template to work again since we now test the branch when searching for objects. issue #5722
-
Côme Chilliet authored
Resolve "Management filter is broken when mainAttr is FALSE" Closes #5701 See merge request !24
-
- 16 Oct, 2017 1 commit
-
-
Côme Chilliet authored
objects::ls and objects::count now add dn filters based on RDNs to avoid false positive when a type use a common objectClass. Management system may be refactored to use the same system. issue #5583
-
- 02 Oct, 2017 1 commit
-
-
Côme Chilliet authored
There was problems with simpleManagement filters when the mainAttr value for one of the objectTypes listed is FALSE. This was at least a problem for Audit. Maybe ACLs. closes #5701
-
- 08 Jun, 2017 1 commit
-
-
Côme Chilliet authored
-
- 28 Mar, 2017 2 commits
-
-
Côme Chilliet authored
Conflicts: plugins/personal/roles/class_userRoles.inc
-
Côme Chilliet authored
Conflicts: include/class_objects.inc
-
- 24 Jan, 2017 1 commit
-
-
Côme Chilliet authored
-
- 20 Jan, 2017 1 commit
-
-
Côme Chilliet authored
-
- 31 Dec, 2016 2 commits
-
-
Benoit Mortier authored
Adapted to the new exception class Signed-off-by:
Benoit Mortier <benoit.mortier@opensides.be>
-
Benoit Mortier authored
Adapted to the new exception class Signed-off-by:
Benoit Mortier <benoit.mortier@opensides.be>
-
- 03 Dec, 2016 2 commits
-
-
Benoit Mortier authored
Signed-off-by:
Benoit Mortier <benoit.mortier@opensides.be>
-
Benoit Mortier authored
Remove this unused "$ui" local variable Remove this unused "$config" local variable Signed-off-by:
Benoit Mortier <benoit.mortier@opensides.be>
-
- 02 Dec, 2016 2 commits
-
-
Benoit Mortier authored
Remove this empty statement. Signed-off-by:
Benoit Mortier <benoit.mortier@opensides.be>
-
Benoit Mortier authored
Use "static" keyword instead of "self" Signed-off-by:
Benoit Mortier <benoit.mortier@opensides.be>
-
- 13 Oct, 2016 2 commits
-
-
Côme Chilliet authored
Conflicts: include/class_filterLDAP.inc include/class_userinfo.inc include/functions.inc
-
Côme Chilliet authored
-
- 11 Oct, 2016 1 commit
-
-
Côme Chilliet authored
Adapted user-filter to match generic name for templates filter
-
- 10 Oct, 2016 1 commit
-
-
Côme Chilliet authored
-
- 20 Sep, 2016 1 commit
-
-
Côme Chilliet authored
-
- 14 Sep, 2016 1 commit
-
-
Côme Chilliet authored
-
- 30 Aug, 2016 1 commit
-
-
Côme Chilliet authored
-
- 26 Aug, 2016 1 commit
-
-
Côme Chilliet authored
-
- 25 Aug, 2016 2 commits
-
-
Côme Chilliet authored
-
Côme Chilliet authored
-