Johannes Meyer
9bd5d4148e
Drop permission config/application/groups/member
...
refs #8826
2015-06-02 09:08:16 +02:00
Johannes Meyer
cf96e66ff2
Rename permission config/application/roles* to config/authentication/...
...
Does also split it into *, show, add, edit, remove as this should behave like
any other authentication configuration.
refs #8826
2015-06-02 09:07:06 +02:00
Johannes Meyer
3fffd90135
Rename permission config/application/groups* to config/authentication/...
...
refs #8826
2015-06-02 09:04:34 +02:00
Johannes Meyer
a558f2873a
Rename permission config/application/users* to config/authentication/...
...
refs #8826
2015-06-02 09:02:57 +02:00
Johannes Meyer
46e2393074
UsergroupbackendController: Do only assert that the user has one permission
...
The configuration of a backend itself should not be that granular.
refs #8826
2015-06-02 08:58:21 +02:00
Johannes Meyer
4bd36bc500
UserGroupForm: Notify the user that memberships will be cleared...
...
...when removing a group.
refs #8826
2015-06-01 14:25:29 +02:00
Johannes Meyer
ea959c2dfd
Introduce controller UsergroupbackendController
...
refs #8826
2015-05-29 16:35:30 +02:00
Johannes Meyer
04835db13e
Introduce form UserGroupBackendForm
...
refs #8826
2015-05-29 16:34:34 +02:00
Johannes Meyer
cb4d6f013a
GroupController: Properly handle 404's when handling group members
...
refs #8826
2015-05-29 12:57:39 +02:00
Johannes Meyer
385042ea92
RepositoryForm: Verify that the entry to work with is valid
...
refs #8826
2015-05-28 16:27:48 +02:00
Alexander Fuhr
49589128ef
Rename identity_key with private_key in ssh resource
...
refs #7595
2015-05-28 14:09:13 +02:00
Eric Lippmann
8b07a0e29a
Add missing return argument in the ResourceConfigForm
2015-05-28 13:17:00 +02:00
Alexander Fuhr
558120e23b
Add resource ssh usage to resources and instances
...
refs #7595
2015-05-28 10:50:13 +02:00
Alexander Fuhr
bf21f55656
Add a new ssh resource form
...
refs #7595
2015-05-28 10:44:58 +02:00
Johannes Meyer
e55d43418d
RoleForm: Add new permission sets for user and group management
...
refs #8826
2015-05-27 10:39:29 +02:00
Johannes Meyer
170379b743
CreateMembershipForm: Properly handle errors when fetching groups
...
refs #8826
2015-05-27 08:55:53 +02:00
Johannes Meyer
a75c74eae1
Introduce form CreateMembershipForm
...
refs #8826
2015-05-26 17:02:27 +02:00
Johannes Meyer
86146b8048
Introduce form AddMemberForm
...
refs #8826
2015-05-26 14:30:55 +02:00
Johannes Meyer
75c5aa2869
Move UserGroupForm to the Icinga\Forms\Config\UserGroup namespace
...
refs #8826
2015-05-26 10:24:13 +02:00
Johannes Meyer
e2c250ca77
Move UserForm to the Icinga\Forms\Config\User namespace
...
refs #8826
2015-05-26 10:23:40 +02:00
Johannes Meyer
ec556edc65
Merge branch 'master' into feature/user-and-group-management-8826
2015-05-26 09:28:35 +02:00
Johannes Meyer
f3124ffd59
UserGroupForm: Fix redirect when renaming a group
...
refs #8826
2015-05-22 17:03:02 +02:00
Johannes Meyer
18e413d15a
UserForm: Fix redirect when renaming a user
...
refs #8826
2015-05-22 17:01:34 +02:00
Eric Lippmann
250f863faa
Allow anonymous LDAP binding
...
fixes #9224
2015-05-22 14:15:59 +02:00
Johannes Meyer
9c6a8898fd
Introduce class UserGroupForm
...
refs #8826
2015-05-20 11:53:04 +02:00
Johannes Meyer
32d1569520
Introduce class UserForm
...
refs #8826
2015-05-20 10:54:06 +02:00
Johannes Meyer
8ea3cd0a13
Introduce class RepositoryForm
...
refs #8826
2015-05-20 10:53:31 +02:00
Johannes Meyer
71fa736144
Merge branch 'master' into feature/user-and-group-management-8826
2015-05-20 10:46:55 +02:00
Eric Lippmann
bd54784496
Don't override submit label in the ConfirmRemovalForm
2015-05-20 10:30:00 +02:00
Eric Lippmann
5a69c26d2c
Fix typo in PHPDoc of ConfirmRemovalForm::init()
2015-05-20 10:30:00 +02:00
Johannes Meyer
c441117324
LdapUserBackend: Extend Repository and implement UserBackendInterface
...
refs #8826
2015-05-04 12:18:25 +02:00
Johannes Meyer
99ac0b78ea
DbUserBackend: Extend DbRepository and implement UserBackendInterface
...
refs #8826
2015-05-04 12:15:05 +02:00
Johannes Meyer
d09ea2845d
Merge branch 'master' into feature/user-and-group-management-8826
2015-04-30 15:20:40 +02:00
Alexander A. Klimov
c839cc0b08
Remove exclamation mark from the notification "Authentication order updated!"
...
resolves #8960
2015-04-27 13:16:54 +02:00
Johannes Meyer
6ca68f438d
Move concrete UserBackend classes to Icinga\Authentication\User
...
refs #8826
2015-04-21 12:51:31 +02:00
Johannes Meyer
62bb35a71e
Fix that the ldap port does not change when updating the encryption to use
...
fixes #8958
2015-04-07 15:07:36 +02:00
Johannes Meyer
dc4d1246a9
Fix that the sql port does not change when updating the type of the database
...
fixes #7491
2015-04-07 15:07:36 +02:00
Alexander Klimov
967a2e82dc
Use (only) "@return $this" in fluent interfaces' documentation
2015-04-07 14:24:11 +02:00
Eric Lippmann
cdd5da80f0
Use Url::getRelativeUrl() when updating dashlets
...
fixes #8363
2015-04-07 13:05:12 +02:00
Johannes Meyer
a3f2d7de7e
LdapResourceForm: Translate "None" with a context as it's ambiguous
2015-03-13 08:53:08 +01:00
Eric Lippmann
e36c430bb3
Merge branch 'feature/protected-menu-8720'
...
resolves #8720
2015-03-13 04:26:19 +01:00
Eric Lippmann
f60a0b86ec
POST disable/enable auto-refresh always against the current location
...
refs #8605
2015-03-13 04:01:08 +01:00
Eric Lippmann
9f0af662a7
Write none instead of plaintext for unencrypted LDAP resources
2015-03-13 00:47:23 +01:00
Eric Lippmann
020329d201
List STARTTLS before LDAPS ...
...
... when choosing encryption for a LDAP resource.
2015-03-13 00:03:01 +01:00
Eric Lippmann
708f08302f
Use encryption instead of connection for the encryption setting of a LDAP resource
2015-03-13 00:02:18 +01:00
Eric Lippmann
61e01a4439
Fix SSL, TLS vs LDAPS, STARTTLS in the LDAP resource form
2015-03-13 00:00:21 +01:00
Eric Lippmann
86f3ce9133
Rename Ldap\Connetion::SSL to ::LDAPS
...
The SSL constant was used to denote LDAP over TLS/SSL. In fact both STARTTLS and LDAPS use encrypted TLS/SSL communication
w/ STARTTLS upgrading a plain text connection and LDAPS using a separate port. Thus speaking of SSL only for LDAPS and TLS only for STARTTLS
is not correct.
2015-03-12 23:56:08 +01:00
Eric Lippmann
8563d5ed3f
PHPDoc: Use @var instead of @type
...
Becasue of too many kittens PSR-5 backed off of deprecating @var.
So that's the way we go too.
2015-03-12 16:08:47 +01:00
Eric Lippmann
33112f6a18
Use {@inheritdoc} in the RoleForm
...
refs #8720
2015-03-12 15:45:22 +01:00
Eric Lippmann
517437eb1b
Security: Add wildcard permissions to the config/ tree
...
refs #8720
2015-03-12 15:45:17 +01:00
Eric Lippmann
195fe6f04b
Security: Rename system/config/modules to config/modules
...
Module config permission and application config permission have to be separeted.
Application config related permissions were added beneath config/application and module
related config permissions will be config/modules for now.
refs #8720
2015-03-12 15:45:14 +01:00
Eric Lippmann
f6e9551235
Security: Rename system/config/roles to config/application/roles
...
Module config permission and application config permission have to be separeted.
Application config related permissions will be added beneath config/application and module
related config permissions will be added beneath config/modules.
refs #8720
2015-03-12 15:45:10 +01:00
Eric Lippmann
08abbda152
Security: Rename system/config/resources to config/application/resources
...
Module config permission and application config permission have to be separeted.
Application config related permissions will be added beneath config/application and module
related config permissions will be added beneath config/modules.
refs #8720
2015-03-12 15:45:07 +01:00
Eric Lippmann
a4e81c320a
Security: Rename system/config/authentication to config/application/authentication
...
Module config permission and application config permission have to be separeted.
Application config related permissions will be added beneath config/application and module
related config permissions will be added beneath config/modules.
refs #8720
2015-03-12 15:45:04 +01:00
Eric Lippmann
956bc3c07a
Security: Rename system/config/application to config/application/general
...
Module config permission and application config permission have to be separeted.
Application config related permissions will be added beneath config/application and module
related config permissions will be added beneath config/modules.
refs #8720
2015-03-12 15:44:58 +01:00
Johannes Meyer
1b440a4f1b
Make SSL/TLS configurable for LDAP resources
...
refs #7771
2015-03-12 15:17:19 +01:00
Johannes Meyer
4a982a382e
Show exception message when LDAP connection validation fails, if any
2015-03-12 14:45:16 +01:00
Johannes Meyer
39a74c4f3d
LDAP-Auth backend config: Add support for custom LDAP filter rules
...
refs #8365
2015-03-11 09:52:14 +01:00
Johannes Meyer
2cf09ebc48
Revert "LdapResourceForm: Validate the host field and do not require a port"
...
This reverts commit a34d6026b3
.
refs #7990
2015-03-11 08:00:20 +01:00
Johannes Meyer
a34d6026b3
LdapResourceForm: Validate the host field and do not require a port
...
fixes #7990
2015-03-10 15:03:48 +01:00
Johannes Meyer
886cc863f0
Add form element value expectation descriptions where required
...
I did not adjust the DateTimePicker element as the sent format is
controlled by the useragent due to either the datetime-local input
type or a javascript datetimepicker. (which does not exist yet, though)
Mentioning the RFC 3339 format such a picker expects is very likely
going to lead to confusion on an end user's side otherwise.
refs #7947
2015-03-06 09:49:15 +01:00
Johannes Meyer
f7785ee04a
Fix that the DashletForm handles the autosubmit manually
2015-03-03 08:24:23 +01:00
Johannes Meyer
4ba281e7e8
Config: Use native form title and description support where appropriate
...
refs #7947
refs #7976
2015-03-02 18:40:47 +01:00
Johannes Meyer
e9bae08a6e
Fix that one can't advance the wizard when skipping the ldap discovery
...
fixes #8506
2015-03-02 18:40:46 +01:00
Johannes Meyer
65eafc0e8f
LdapDiscoveryForm: Remove waste
2015-03-02 18:40:46 +01:00
Johannes Meyer
ea4de82545
Login: Disable the required cue
...
It should be obvious that it is necessary to input a name and a password
to login in case you're looking at a "login" form...
refs #7934
2015-02-27 09:09:25 +01:00
Alexander Fuhr
b375a4f6cc
Fix multiple renderLayout parameters in the url
...
refs #7945
2015-02-13 16:21:19 +01:00
Alexander Fuhr
2112676594
Implement hidden accessible control for auto refresh on the page
...
refs #7945
2015-02-13 14:34:29 +01:00
Alexander Fuhr
b9c9f564ec
Add editable auto_refresh parameter to the user preferences
...
refs #7945
2015-02-12 15:12:10 +01:00
Johannes Meyer
c06f015210
Ensure that all utilized form validators can be translated
...
refs #8415
2015-02-12 09:11:02 +01:00
Johannes Meyer
6c70a53309
Avoid to instantiate custom form element validators directly
...
refs #8415
2015-02-12 09:11:02 +01:00
Eric Lippmann
6bae2e0a53
Note that our license is GPL v2 or any later version in our license header instead of pointing to the license's URL
2015-02-04 10:52:27 +01:00
Eric Lippmann
ed411ec9b6
Increase size of the permissions set input
...
fixes #7762
2015-02-03 16:58:53 +01:00
Eric Lippmann
5b4fab0750
Add license header
...
This time without syntax errors hopefully :)
2015-02-03 16:27:59 +01:00
Eric Lippmann
5fa2e3cfdc
Revert "Add license header"
...
This reverts commit 338d067aba
.
2015-02-03 16:16:26 +01:00
Eric Lippmann
338d067aba
Add license header
...
fixes #7788
2015-02-03 15:51:04 +01:00
Eric Lippmann
53e7b44308
security: Provide a permission for module configuration
2015-02-02 14:16:26 +01:00
Johannes Meyer
bf470125c3
Merge branch 'master' into feature/create-missing-directories-when-creating-inis-8219
...
Conflicts:
modules/monitoring/library/Monitoring/MonitoringWizard.php
2015-01-30 16:21:42 +01:00
Eric Lippmann
65a2c47506
security: Provide permissions for our config actions
2015-01-30 13:29:47 +01:00
Johannes Meyer
63305fdf9a
Add Icinga\Application\Config::saveIni()
...
Simplifies saving INI files. Icinga\File\Ini\IniWriter does already require an
instance of Icinga\Application\Config so it's obvious to give "Config" the
task to initialize the writer.. We do also have a central place to handle
creating missing ancestor directories now.
refs #8219
2015-01-30 09:32:08 +01:00
Johannes Meyer
50fc85d7ff
Rename authentication type "autologin" to "external"
...
refs #8274
2015-01-27 09:49:36 +01:00
Johannes Meyer
55c20abddc
Only show the "save to session" button in case preferences store = none
...
refs #8234
2015-01-23 16:25:24 +01:00
Johannes Meyer
359336243c
Save "none" instead of "null" when choosing to not to store preferences
...
refs #8234
2015-01-23 16:25:24 +01:00
Johannes Meyer
2a543bb5ae
Rename the preference setting `type' to `store'
...
refs #8234
2015-01-23 16:25:23 +01:00
Johannes Meyer
14a4aaeb77
Revert "Fix that when chosing to not to store preferences an invalid config is created"
...
This reverts commit 6284da451e
.
2015-01-23 15:23:43 +01:00
Johannes Meyer
6284da451e
Fix that when chosing to not to store preferences an invalid config is created
...
fixes #8234
2015-01-23 14:42:09 +01:00
Eric Lippmann
e93628f4b4
Prefer 'hostname' over 'host name' in the LdapDiscoveryForm
2015-01-20 16:53:27 +01:00
Johannes Meyer
2d957205ef
Using $this when not in object context, doesn't work.
...
refs #7551
2015-01-19 13:47:53 +01:00
Johannes Meyer
dbd69ba693
Replace t() and mt() with translate() in the application's forms
...
refs #7551
2015-01-19 11:26:23 +01:00
Eric Lippmann
f0fe6246ac
Use '/var/log/icingaweb2/icingaweb2.log' as default path when logging to file
2014-12-29 16:02:40 +01:00
Eric Lippmann
5bc2144b18
Use 'icingaweb2' as default application prefix for logging to syslog
2014-12-29 16:01:07 +01:00
Eric Lippmann
cfb52eeadb
Do not use a default regular expression for stripping off parts of a username when configuring an auto-login backend
...
There's no safe default for this.
2014-12-29 15:56:32 +01:00
Eric Lippmann
e1bedc9afe
Use Icinga 2's default Livestatus socket path as default when configuring a livestatus resource
2014-12-29 15:55:57 +01:00
Eric Lippmann
4441c1d4de
Allow to grant every permission
2014-12-29 11:53:55 +01:00
Eric Lippmann
49dad43a0a
Use @type instead of @var in Security/RoleForm.php
2014-12-29 11:53:06 +01:00
Eric Lippmann
2c1a37afa3
Use Zend_Form_Element::filterName() for translating restriction names to element names
...
fixes #8086
2014-12-29 10:51:12 +01:00
Eric Lippmann
6960a08de0
Revert "Escape restriction names manually in Forms\Security\RoleForm"
...
This reverts commit 706e5504e6
.
HTML5 does allow any non-empty value for the name attribute but Zend only permits
alphanumerics, the underscore, the circumflex and any ASCII character in range \x7f to \xff (127 to 255).
Thus only escaping the slash (/) is wrong.
refs #8086
2014-12-29 09:39:23 +01:00
Johannes Meyer
706e5504e6
Escape restriction names manually in Forms\Security\RoleForm
...
fixes #8086
2014-12-22 10:46:29 +01:00
Johannes Meyer
ebf908b1b5
Make db requirement checks more sensitive
...
fixes #7837
2014-12-01 15:38:10 +01:00
Eric Lippmann
f0ece3d88a
Revert "Remove permissions and restrictions for now"
...
This reverts commit 8335bdcb32
.
Readd permissions and restrictions.
2014-11-25 16:11:01 +01:00