Johannes Meyer
ec40efe157
Only open trusted iframe sources by default
...
Trusted in this case means, it was Icinga Web that
rendered a link and the user followed it. Whether
a source is trustworthy or not is detected by use
of the user's session id to hash it combined with
the source similar to how CSRF tokens are assembled.
2025-03-26 10:25:31 +01:00
Johannes Meyer
8551fffd4f
roles: Fix default sort rule by name
2024-11-05 09:16:21 +01:00
Johannes Meyer
aba56d8ef1
RoleController: Clean up sort rules
...
* Removes `permissions` from sort rules
* Adds `parent` to filter and sort rules
2024-11-05 09:16:21 +01:00
Johannes Meyer
1612b78af6
RoleController: Remove todos, the issue is closed
2024-11-05 09:16:21 +01:00
alyxbb
5c94bf7bae
removed gendered languaged
2024-01-08 23:55:09 +00:00
Johannes Meyer
4a8d171aec
migrations/index: Let the migrate all button submit the migration form
2023-09-19 14:37:55 +02:00
Yonas Habteab
99e8a2322d
Don't render migrate button in detailed file list view
2023-09-19 14:37:55 +02:00
Yonas Habteab
26cae8b882
Rename MigrationHook
-> DbMigrationHook
2023-09-19 14:37:55 +02:00
Yonas Habteab
2657f032dc
Allow to automatically fix missing grants & elevalte database users
...
Co-authored-by: Johannes Meyer
2023-09-19 14:37:55 +02:00
Yonas Habteab
73b1041816
Fix phpstan claims & php code sniffer errors
2023-09-19 14:37:55 +02:00
Yonas Habteab
1da5487066
Introduce MigrationsController
& add pending migrations list in about view
2023-09-19 14:37:55 +02:00
Yonas Habteab
faaebaeffb
Forward failed requests for routes with pending migrations
2023-09-19 14:37:55 +02:00
raviks789
91ad755759
Remove redundant gravatar in contact detail
...
The gravatar for contacts was never correctly rendered in the detailed page. Hence it will be
completely removed.
2023-09-07 13:38:02 +02:00
Tobias Tiederle
e66f76e881
configure landing page using environment variable
2023-09-07 08:49:21 +02:00
Yonas Habteab
3b7f054534
Initiate full page reload upon CSP
config change
2023-08-28 12:42:32 +02:00
Yonas Habteab
55b4a5eb63
StaticController: Pass only strings to str_pad
as first argument
2023-08-23 10:53:15 +02:00
raviks789
0476046ce6
AuthenticationController
: Use correct name case for method AesCrypt::getIV()
2023-08-23 10:53:14 +02:00
Johannes Meyer
965aac11ef
RoleController: Always perform a permission check
2022-12-07 11:56:17 +01:00
Johannes Meyer
ec7fb82a94
login: Don't redirect to external resources
...
fixes #4945
2022-12-07 11:54:45 +01:00
Dirk Goetz
d5d714b1ee
Fix gravatar: set content-type header and size
...
Fixes #2254
2022-06-15 09:03:12 +02:00
Johannes Meyer
e050ea53ee
RoleController: Include domain of a domain-aware backend..
...
..when suggesting user names of it
2022-06-13 15:09:42 +02:00
Sukhwinder Dhillon
aad2419545
Remove obsolete config_backend
option and not required code
...
The user preferences backend is now always a `db`.
2022-05-27 14:02:11 +02:00
Sukhwinder Dhillon
8ff1a22df7
Set preferences store type to Db
and make it non-configurable
2022-05-27 13:55:48 +02:00
Johannes Meyer
3dc384fb58
Avoid passing null
to non-nullable arguments
2022-03-24 12:29:06 +01:00
Johannes Meyer
05a18dcdb5
Adjust calls to CompatController::setTitle()
...
refs https://github.com/Icinga/ipl-web/pull/72
2022-03-16 16:35:59 +01:00
Johannes Meyer
744fe5977f
AccountController: Don't try to set a storage if there's none
2021-11-02 13:28:52 +01:00
Sukhwinder Dhillon
8c22514758
Utilize multiple encryption ciphers for remember me
2021-08-09 16:58:58 +02:00
Sukhwinder Dhillon
645c0770a2
Rememberme compatibility with php version 5.6+ ( #4472 )
2021-07-26 17:37:38 +02:00
Johannes Meyer
8b5bc6950b
user/createmembership: Don't render user/form.phtml
...
fixes #4450
2021-07-21 08:02:54 +02:00
Johannes Meyer
a72d24a672
config/module(dis|en)able: Explicitly reload the window
...
Redirecting to `left#!right` by HTTP doesn't work
and is the wrong solution anyway.
2021-07-07 09:41:48 +02:00
Johannes Meyer
439218869b
Only reload JS/CSS if really required when en-/disabling a module
2021-06-16 14:56:36 +02:00
Johannes Meyer
0d6da2d859
error/error: Check web2's deps and enhance lib checks
2021-06-07 09:40:40 +02:00
Eric Lippmann
68acf12407
Remember me ( #4112 )
...
Co-authored-by: Sukhwinder Dhillon <sukhwinder.dhillon@icinga.com>
2021-05-21 15:43:06 +02:00
Johannes Meyer
5e382dcfa9
Introduce health endpoint /health[/checks]
2021-05-14 15:45:35 +02:00
Johannes Meyer
95e20d443c
config/module(enable|disable): Perform a HTTP redirect upon success
...
An HTTP redirect will cause a full reload. If our cache works,
CSS and JS is automatically refreshed.
2021-04-12 17:02:39 +02:00
Johannes Meyer
8e2ae13885
role/audit: Show a message if no suggestions are found
2021-04-07 16:03:05 +02:00
Johannes Meyer
54acd6b4c8
role/audit: Group suggestions by backend name
2021-04-07 16:02:31 +02:00
Johannes Meyer
b48f7f3489
role/audit: Don't use class EmptyState
, it's from icingadb web
2021-04-07 16:00:01 +02:00
Johannes Meyer
d49962ac82
role/audit: Pre-populate backend name with the first one found
...
Otherwise a user who doesn't use a suggestion will see an error.
2021-04-07 15:10:01 +02:00
Johannes Meyer
5b970c79ad
role/audit: Use role-audit
as id instead of role/audit
...
Since HTML5 nearly any char is allowed in ids, including the slash,
but jQuery doesn't support the slash as part of css selectors...
2021-04-07 14:30:14 +02:00
Johannes Meyer
65cfa9236c
role/[add|edit|remove]: Set __CLOSE__
as redirect target
...
The form is also reachable through the audit view now. This
results in the correct handling in either of both views.
2021-04-07 14:30:14 +02:00
Johannes Meyer
fa2c3c8999
role/audit: Give the privilege audit an explicit (non-protected) id
2021-04-07 14:30:14 +02:00
Johannes Meyer
be227fd61d
roles/audit: Utilize view Icinga\Web\View\PrivilegeAudit
2021-04-07 14:30:14 +02:00
Johannes Meyer
c203ffdd79
role|user|group: Open Audit
tab always in #col1
and close #col2
2021-04-07 14:30:14 +02:00
Johannes Meyer
8ff88cd6f1
role/audit: Require a backend name for user audits
2021-04-07 14:30:14 +02:00
Johannes Meyer
1fbd76ef69
role/audit: Also allow to audit groups
2021-04-07 14:30:14 +02:00
Johannes Meyer
05fdd98ba8
role/audit: Add input to choose a user
2021-04-07 14:30:14 +02:00
Johannes Meyer
fe7879c68b
group|role|user: Add new tab role/audit
2021-04-07 14:30:14 +02:00
sukhwinder33445
ab97b6fdf0
Enforce database as configuration backend ( #4135 )
2021-02-18 12:31:21 +01:00
Johannes Meyer
cc65164a67
Adjust global permissions
2021-02-18 11:11:39 +01:00