23 Commits

Author SHA1 Message Date
raviks789
8d9ecf3b0a
Apply relevant restrictions on REST url endpoints
The following url end points should apply relevant restrictions to filter out objects and show correct HTTP status code:
- icingaweb2/director/service, if the host name is left out of the query (Example: icingaweb2/director/service?name=service-name)
- icingaweb2/directore/notification
- icingaweb2/director/serviceset
- icingaweb2/director/scheduled-downtime
2025-03-26 11:12:15 +01:00
Thomas Gelf
0a9bd53d2d RestApi: no escaping for unicode and slashes
fixes #2243
2020-12-02 18:06:34 +01:00
Thomas Gelf
e2d753bad7 RestApi: add a new helper method to this trait 2020-10-07 16:04:06 +02:00
Thomas Gelf
54ec11aec2 Window: workaround for bug in web >= 2.6.3
fixes #2063
2020-01-17 11:58:28 +01:00
Thomas Gelf
ec11dea8a9 Basket: allow to download for non-primary Instance 2018-11-15 12:50:33 +01:00
Thomas Gelf
488aad6f4e DirectorDb: fix overridden variable, has no effect
...at least not yet, it would have once access to Director DBs can be restricted
2018-09-04 11:08:37 +02:00
Thomas Gelf
14a3039f65 controllers, libs: less noise from exceptions 2018-08-08 10:07:39 +02:00
Thomas Gelf
06b6356de1 Dashboard: show DB selection only for setups...
...with multiple DBs
2018-06-23 11:17:56 +02:00
Thomas Gelf
75268479ca RestApi: cleanup, exceptions, phpdoc 2018-06-14 08:33:11 +02:00
Thomas Gelf
d2cfa20385 DirectorDb: push missing changes 2018-06-08 00:07:14 +02:00
Thomas Gelf
2f68489cac DirectorDb: do not fail when unconfigured and...
...not use by Controllers
2018-03-28 17:55:57 +02:00
Thomas Gelf
56c5ac0846 DirectorDb: ConfigurationError has been missing 2018-03-28 17:52:21 +02:00
Thomas Gelf
9fbc523ffd ConfigController: explicitly forbid all REST API
...calls to methods not being exported.

fixes #1113
2017-08-25 12:33:36 +02:00
Thomas Gelf
52045b799a RestApi: add new RequestHandler 2017-08-14 10:51:26 +02:00
Thomas Gelf
9d60bceb0c Controller/Extension: remove obsolete QuickSearch 2017-07-24 08:49:55 +02:00
Thomas Gelf
475c84de1e RestApi: allow to override permission check 2017-07-14 13:21:42 +02:00
Thomas Gelf
8f1ae6fc94 RestApi: remove useless code
This is handled in the controller
2017-07-14 13:21:42 +02:00
Thomas Gelf
0b8d67a3ff ObjectRestrictions: new controller extension 2017-07-14 13:21:42 +02:00
Thomas Gelf
ac1574c94a RestApi: move also the RestApi to a trait 2017-07-14 13:21:42 +02:00
Thomas Gelf
dc6ec2a41d CoreApi: one more trait, for CoreApi functionality 2017-07-14 13:21:42 +02:00
Thomas Gelf
e88c13663f DirectorDb: new controller extension 2017-07-14 13:21:42 +02:00
Thomas Gelf
bf5b7dbf32 QuickSearch: implement it as a trait 2017-07-14 13:21:42 +02:00
Thomas Gelf
fd99b6924e SingleObjectApiHandler: attempt to move REST API
...and it's related logic away from controllers
2017-07-14 13:21:42 +02:00