- 09 Jul, 2020 1 commit
-
-
Côme Chilliet authored
This avoids repeating parameters at each call, and makes sure the same parameters are used for escaping across fusiondirectory. This commit also adds escaping in some places where there was none. issue #6071
-
- 25 Feb, 2020 1 commit
-
-
Côme Chilliet authored
issue #6065
-
- 18 Feb, 2020 1 commit
-
-
Côme Chilliet authored
issue #6065
-
- 17 Dec, 2019 1 commit
-
-
Côme Chilliet authored
This will be useful to get binary values through the webservices. issue #6060
-
- 16 Oct, 2019 1 commit
-
-
Côme Chilliet authored
Reviewed the template creation so that is uses a new objects::createTemplate method, and the simplePlugin tabs are aware that they are part of template in the constructor (no need to call setTemplateMode later anymore). issue #6039
-
- 17 Jul, 2019 1 commit
-
-
Côme Chilliet authored
ACL base should be computed from current object DN or base. issue #5039
-
- 16 Jul, 2019 1 commit
-
-
Côme Chilliet authored
This allows to avoid ldap reads from pluglist::load, and should fix a crash happenning in index.php when using encrypted password in config file. issue #6015
-
- 28 May, 2019 1 commit
-
-
Côme Chilliet authored
issue #5993
-
- 26 Feb, 2019 1 commit
-
-
Côme Chilliet authored
issue #5955
-
- 25 Feb, 2019 1 commit
-
-
Côme Chilliet authored
Basic fixes like identation issue #5955
-
- 19 Feb, 2019 1 commit
-
-
Côme Chilliet authored
issue #5956
-
- 05 Feb, 2019 1 commit
-
-
Côme Chilliet authored
Like auditEvent issue #5135
-
- 17 Jan, 2019 1 commit
-
-
Côme Chilliet authored
issue #5942
-
- 19 Nov, 2018 1 commit
-
-
Côme Chilliet authored
Used in invitations plugin issue #5924
-
- 15 Nov, 2018 1 commit
-
-
Côme Chilliet authored
issue #5135
-
- 29 Aug, 2018 3 commits
-
-
Côme Chilliet authored
issue #5867
-
Côme Chilliet authored
Also ACLs are checked to make sure the filter is allowed before running the query. Now plugins can add fields which will be part of the default searched fields for a type. This will be used by the mail plugin for instance. issue #5867
-
Côme Chilliet authored
Still needs to be added: ACL check to avoid crashes, and plSearchAttribute key in plInfo for tabs to add fields to the search. issue #5867
-
- 17 Jul, 2018 1 commit
-
-
Côme Chilliet authored
* Avoid parsing error text, use errno instead * Reset sizelimit on each page so that incomplete warning only shows up when the list actually is incomplete * Do not show dialog by default only warning and configure button issue #5135
-
- 27 Jun, 2018 1 commit
-
-
Côme Chilliet authored
issue #5135
-
- 24 May, 2018 1 commit
-
-
Côme Chilliet authored
issue #5135
-
- 07 May, 2018 1 commit
-
-
Côme Chilliet authored
issue #5831
-
- 25 Apr, 2018 2 commits
-
-
Côme Chilliet authored
-
Côme Chilliet authored
-
- 13 Feb, 2018 1 commit
-
-
Côme Chilliet authored
issue #5775
-
- 12 Dec, 2017 1 commit
-
-
Côme Chilliet authored
-
- 05 Dec, 2017 1 commit
-
-
Côme Chilliet authored
Now there is an ACL you can put in any ACL role to give access to the dashboard. And all searches from the dashboard are checking ACL and returning info only on the data you are allowed to see. Plugins providing a dashboard tab will have to be adapted as well issue #5734
-
- 20 Nov, 2017 1 commit
-
-
Côme Chilliet authored
This adds an option to check ACLs on filter for count method. It will be used by webservice plugin. issue #5732
-
- 15 Nov, 2017 1 commit
-
-
Côme Chilliet authored
Two vars were named acl and were colliding, resulting in bugs issue #5732
-
- 14 Nov, 2017 3 commits
-
-
Côme Chilliet authored
issue #5732
-
Côme Chilliet authored
objects::ls will now check that the calling user is allowed to read the attributes used in the filter. This will avoid information leak through webservice or custom filter. issue #5732
-
Côme Chilliet authored
Took code from webservice to include directly in objects class. The point is to make sure objects::ls is not used to see attributes that the calling user is not allowed to see. The same kind of check should be done for the attributes used in the filter. Maybe a bypass should be added later to allow "admins" to use operational attributes and other LDAP attributes which does not match an ACL. issue #5732
-
- 24 Oct, 2017 1 commit
-
-
Côme Chilliet authored
This allows template to work again since we now test the branch when searching for objects. issue #5722
-
- 16 Oct, 2017 1 commit
-
-
Côme Chilliet authored
objects::ls and objects::count now add dn filters based on RDNs to avoid false positive when a type use a common objectClass. Management system may be refactored to use the same system. issue #5583
-
- 02 Oct, 2017 1 commit
-
-
Côme Chilliet authored
There was problems with simpleManagement filters when the mainAttr value for one of the objectTypes listed is FALSE. This was at least a problem for Audit. Maybe ACLs. closes #5701
-
- 08 Jun, 2017 1 commit
-
-
Côme Chilliet authored
-
- 28 Mar, 2017 2 commits
-
-
Côme Chilliet authored
Conflicts: plugins/personal/roles/class_userRoles.inc
-
Côme Chilliet authored
Conflicts: include/class_objects.inc
-
- 24 Jan, 2017 1 commit
-
-
Côme Chilliet authored
-
- 20 Jan, 2017 1 commit
-
-
Côme Chilliet authored
-