Commit Graph

445 Commits

Author SHA1 Message Date
Johannes Meyer 385042ea92 RepositoryForm: Verify that the entry to work with is valid
refs #8826
2015-05-28 16:27:48 +02:00
Alexander Fuhr 49589128ef Rename identity_key with private_key in ssh resource
refs #7595
2015-05-28 14:09:13 +02:00
Eric Lippmann 8b07a0e29a Add missing return argument in the ResourceConfigForm 2015-05-28 13:17:00 +02:00
Alexander Fuhr 558120e23b Add resource ssh usage to resources and instances
refs #7595
2015-05-28 10:50:13 +02:00
Alexander Fuhr bf21f55656 Add a new ssh resource form
refs #7595
2015-05-28 10:44:58 +02:00
Johannes Meyer e55d43418d RoleForm: Add new permission sets for user and group management
refs #8826
2015-05-27 10:39:29 +02:00
Johannes Meyer 170379b743 CreateMembershipForm: Properly handle errors when fetching groups
refs #8826
2015-05-27 08:55:53 +02:00
Johannes Meyer a75c74eae1 Introduce form CreateMembershipForm
refs #8826
2015-05-26 17:02:27 +02:00
Johannes Meyer 86146b8048 Introduce form AddMemberForm
refs #8826
2015-05-26 14:30:55 +02:00
Johannes Meyer 75c5aa2869 Move UserGroupForm to the Icinga\Forms\Config\UserGroup namespace
refs #8826
2015-05-26 10:24:13 +02:00
Johannes Meyer e2c250ca77 Move UserForm to the Icinga\Forms\Config\User namespace
refs #8826
2015-05-26 10:23:40 +02:00
Johannes Meyer ec556edc65 Merge branch 'master' into feature/user-and-group-management-8826 2015-05-26 09:28:35 +02:00
Johannes Meyer f3124ffd59 UserGroupForm: Fix redirect when renaming a group
refs #8826
2015-05-22 17:03:02 +02:00
Johannes Meyer 18e413d15a UserForm: Fix redirect when renaming a user
refs #8826
2015-05-22 17:01:34 +02:00
Eric Lippmann 250f863faa Allow anonymous LDAP binding
fixes #9224
2015-05-22 14:15:59 +02:00
Johannes Meyer 9c6a8898fd Introduce class UserGroupForm
refs #8826
2015-05-20 11:53:04 +02:00
Johannes Meyer 32d1569520 Introduce class UserForm
refs #8826
2015-05-20 10:54:06 +02:00
Johannes Meyer 8ea3cd0a13 Introduce class RepositoryForm
refs #8826
2015-05-20 10:53:31 +02:00
Johannes Meyer 71fa736144 Merge branch 'master' into feature/user-and-group-management-8826 2015-05-20 10:46:55 +02:00
Eric Lippmann bd54784496 Don't override submit label in the ConfirmRemovalForm 2015-05-20 10:30:00 +02:00
Eric Lippmann 5a69c26d2c Fix typo in PHPDoc of ConfirmRemovalForm::init() 2015-05-20 10:30:00 +02:00
Johannes Meyer c441117324 LdapUserBackend: Extend Repository and implement UserBackendInterface
refs #8826
2015-05-04 12:18:25 +02:00
Johannes Meyer 99ac0b78ea DbUserBackend: Extend DbRepository and implement UserBackendInterface
refs #8826
2015-05-04 12:15:05 +02:00
Johannes Meyer d09ea2845d Merge branch 'master' into feature/user-and-group-management-8826 2015-04-30 15:20:40 +02:00
Alexander A. Klimov c839cc0b08 Remove exclamation mark from the notification "Authentication order updated!"
resolves #8960
2015-04-27 13:16:54 +02:00
Johannes Meyer 6ca68f438d Move concrete UserBackend classes to Icinga\Authentication\User
refs #8826
2015-04-21 12:51:31 +02:00
Johannes Meyer 62bb35a71e Fix that the ldap port does not change when updating the encryption to use
fixes #8958
2015-04-07 15:07:36 +02:00
Johannes Meyer dc4d1246a9 Fix that the sql port does not change when updating the type of the database
fixes #7491
2015-04-07 15:07:36 +02:00
Alexander Klimov 967a2e82dc Use (only) "@return $this" in fluent interfaces' documentation 2015-04-07 14:24:11 +02:00
Eric Lippmann cdd5da80f0 Use Url::getRelativeUrl() when updating dashlets
fixes #8363
2015-04-07 13:05:12 +02:00
Johannes Meyer a3f2d7de7e LdapResourceForm: Translate "None" with a context as it's ambiguous 2015-03-13 08:53:08 +01:00
Eric Lippmann e36c430bb3 Merge branch 'feature/protected-menu-8720'
resolves #8720
2015-03-13 04:26:19 +01:00
Eric Lippmann f60a0b86ec POST disable/enable auto-refresh always against the current location
refs #8605
2015-03-13 04:01:08 +01:00
Eric Lippmann 9f0af662a7 Write none instead of plaintext for unencrypted LDAP resources 2015-03-13 00:47:23 +01:00
Eric Lippmann 020329d201 List STARTTLS before LDAPS ...
... when choosing encryption for a LDAP resource.
2015-03-13 00:03:01 +01:00
Eric Lippmann 708f08302f Use encryption instead of connection for the encryption setting of a LDAP resource 2015-03-13 00:02:18 +01:00
Eric Lippmann 61e01a4439 Fix SSL, TLS vs LDAPS, STARTTLS in the LDAP resource form 2015-03-13 00:00:21 +01:00
Eric Lippmann 86f3ce9133 Rename Ldap\Connetion::SSL to ::LDAPS
The SSL constant was used to denote LDAP over TLS/SSL. In fact both STARTTLS and LDAPS use encrypted TLS/SSL communication
w/ STARTTLS upgrading a plain text connection and LDAPS using a separate port. Thus speaking of SSL only for LDAPS and TLS only for STARTTLS
is not correct.
2015-03-12 23:56:08 +01:00
Eric Lippmann 8563d5ed3f PHPDoc: Use @var instead of @type
Becasue of too many kittens PSR-5 backed off of deprecating @var.
So that's the way we go too.
2015-03-12 16:08:47 +01:00
Eric Lippmann 33112f6a18 Use {@inheritdoc} in the RoleForm
refs #8720
2015-03-12 15:45:22 +01:00
Eric Lippmann 517437eb1b Security: Add wildcard permissions to the config/ tree
refs #8720
2015-03-12 15:45:17 +01:00
Eric Lippmann 195fe6f04b Security: Rename system/config/modules to config/modules
Module config permission and application config permission have to be separeted.
Application config related permissions were added beneath config/application and module
related config permissions will be config/modules for now.

refs #8720
2015-03-12 15:45:14 +01:00
Eric Lippmann f6e9551235 Security: Rename system/config/roles to config/application/roles
Module config permission and application config permission have to be separeted.
Application config related permissions will be added beneath config/application and module
related config permissions will be added beneath config/modules.

refs #8720
2015-03-12 15:45:10 +01:00
Eric Lippmann 08abbda152 Security: Rename system/config/resources to config/application/resources
Module config permission and application config permission have to be separeted.
Application config related permissions will be added beneath config/application and module
related config permissions will be added beneath config/modules.

refs #8720
2015-03-12 15:45:07 +01:00
Eric Lippmann a4e81c320a Security: Rename system/config/authentication to config/application/authentication
Module config permission and application config permission have to be separeted.
Application config related permissions will be added beneath config/application and module
related config permissions will be added beneath config/modules.

refs #8720
2015-03-12 15:45:04 +01:00
Eric Lippmann 956bc3c07a Security: Rename system/config/application to config/application/general
Module config permission and application config permission have to be separeted.
Application config related permissions will be added beneath config/application and module
related config permissions will be added beneath config/modules.

refs #8720
2015-03-12 15:44:58 +01:00
Johannes Meyer 1b440a4f1b Make SSL/TLS configurable for LDAP resources
refs #7771
2015-03-12 15:17:19 +01:00
Johannes Meyer 4a982a382e Show exception message when LDAP connection validation fails, if any 2015-03-12 14:45:16 +01:00
Johannes Meyer 39a74c4f3d LDAP-Auth backend config: Add support for custom LDAP filter rules
refs #8365
2015-03-11 09:52:14 +01:00
Johannes Meyer 2cf09ebc48 Revert "LdapResourceForm: Validate the host field and do not require a port"
This reverts commit a34d6026b3.

refs #7990
2015-03-11 08:00:20 +01:00
Johannes Meyer a34d6026b3 LdapResourceForm: Validate the host field and do not require a port
fixes #7990
2015-03-10 15:03:48 +01:00
Johannes Meyer 886cc863f0 Add form element value expectation descriptions where required
I did not adjust the DateTimePicker element as the sent format is
controlled by the useragent due to either the datetime-local input
type or a javascript datetimepicker. (which does not exist yet, though)
Mentioning the RFC 3339 format such a picker expects is very likely
going to lead to confusion on an end user's side otherwise.

refs #7947
2015-03-06 09:49:15 +01:00
Johannes Meyer f7785ee04a Fix that the DashletForm handles the autosubmit manually 2015-03-03 08:24:23 +01:00
Johannes Meyer 4ba281e7e8 Config: Use native form title and description support where appropriate
refs #7947
refs #7976
2015-03-02 18:40:47 +01:00
Johannes Meyer e9bae08a6e Fix that one can't advance the wizard when skipping the ldap discovery
fixes #8506
2015-03-02 18:40:46 +01:00
Johannes Meyer 65eafc0e8f LdapDiscoveryForm: Remove waste 2015-03-02 18:40:46 +01:00
Johannes Meyer ea4de82545 Login: Disable the required cue
It should be obvious that it is necessary to input a name and a password
to login in case you're looking at a "login" form...

refs #7934
2015-02-27 09:09:25 +01:00
Alexander Fuhr b375a4f6cc Fix multiple renderLayout parameters in the url
refs #7945
2015-02-13 16:21:19 +01:00
Alexander Fuhr 2112676594 Implement hidden accessible control for auto refresh on the page
refs #7945
2015-02-13 14:34:29 +01:00
Alexander Fuhr b9c9f564ec Add editable auto_refresh parameter to the user preferences
refs #7945
2015-02-12 15:12:10 +01:00
Johannes Meyer c06f015210 Ensure that all utilized form validators can be translated
refs #8415
2015-02-12 09:11:02 +01:00
Johannes Meyer 6c70a53309 Avoid to instantiate custom form element validators directly
refs #8415
2015-02-12 09:11:02 +01:00
Eric Lippmann 6bae2e0a53 Note that our license is GPL v2 or any later version in our license header instead of pointing to the license's URL 2015-02-04 10:52:27 +01:00
Eric Lippmann ed411ec9b6 Increase size of the permissions set input
fixes #7762
2015-02-03 16:58:53 +01:00
Eric Lippmann 5b4fab0750 Add license header
This time without syntax errors hopefully :)
2015-02-03 16:27:59 +01:00
Eric Lippmann 5fa2e3cfdc Revert "Add license header"
This reverts commit 338d067aba.
2015-02-03 16:16:26 +01:00
Eric Lippmann 338d067aba Add license header
fixes #7788
2015-02-03 15:51:04 +01:00
Eric Lippmann 53e7b44308 security: Provide a permission for module configuration 2015-02-02 14:16:26 +01:00
Johannes Meyer bf470125c3 Merge branch 'master' into feature/create-missing-directories-when-creating-inis-8219
Conflicts:
	modules/monitoring/library/Monitoring/MonitoringWizard.php
2015-01-30 16:21:42 +01:00
Eric Lippmann 65a2c47506 security: Provide permissions for our config actions 2015-01-30 13:29:47 +01:00
Johannes Meyer 63305fdf9a Add Icinga\Application\Config::saveIni()
Simplifies saving INI files. Icinga\File\Ini\IniWriter does already require an
instance of Icinga\Application\Config so it's obvious to give "Config" the
task to initialize the writer.. We do also have a central place to handle
creating missing ancestor directories now.

refs #8219
2015-01-30 09:32:08 +01:00
Johannes Meyer 50fc85d7ff Rename authentication type "autologin" to "external"
refs #8274
2015-01-27 09:49:36 +01:00
Johannes Meyer 55c20abddc Only show the "save to session" button in case preferences store = none
refs #8234
2015-01-23 16:25:24 +01:00
Johannes Meyer 359336243c Save "none" instead of "null" when choosing to not to store preferences
refs #8234
2015-01-23 16:25:24 +01:00
Johannes Meyer 2a543bb5ae Rename the preference setting `type' to `store'
refs #8234
2015-01-23 16:25:23 +01:00
Johannes Meyer 14a4aaeb77 Revert "Fix that when chosing to not to store preferences an invalid config is created"
This reverts commit 6284da451e.
2015-01-23 15:23:43 +01:00
Johannes Meyer 6284da451e Fix that when chosing to not to store preferences an invalid config is created
fixes #8234
2015-01-23 14:42:09 +01:00
Eric Lippmann e93628f4b4 Prefer 'hostname' over 'host name' in the LdapDiscoveryForm 2015-01-20 16:53:27 +01:00
Johannes Meyer 2d957205ef Using $this when not in object context, doesn't work.
refs #7551
2015-01-19 13:47:53 +01:00
Johannes Meyer dbd69ba693 Replace t() and mt() with translate() in the application's forms
refs #7551
2015-01-19 11:26:23 +01:00
Eric Lippmann f0fe6246ac Use '/var/log/icingaweb2/icingaweb2.log' as default path when logging to file 2014-12-29 16:02:40 +01:00
Eric Lippmann 5bc2144b18 Use 'icingaweb2' as default application prefix for logging to syslog 2014-12-29 16:01:07 +01:00
Eric Lippmann cfb52eeadb Do not use a default regular expression for stripping off parts of a username when configuring an auto-login backend
There's no safe default for this.
2014-12-29 15:56:32 +01:00
Eric Lippmann e1bedc9afe Use Icinga 2's default Livestatus socket path as default when configuring a livestatus resource 2014-12-29 15:55:57 +01:00
Eric Lippmann 4441c1d4de Allow to grant every permission 2014-12-29 11:53:55 +01:00
Eric Lippmann 49dad43a0a Use @type instead of @var in Security/RoleForm.php 2014-12-29 11:53:06 +01:00
Eric Lippmann 2c1a37afa3 Use Zend_Form_Element::filterName() for translating restriction names to element names
fixes #8086
2014-12-29 10:51:12 +01:00
Eric Lippmann 6960a08de0 Revert "Escape restriction names manually in Forms\Security\RoleForm"
This reverts commit 706e5504e6.

HTML5 does allow any non-empty value for the name attribute but Zend only permits
alphanumerics, the underscore, the circumflex and any ASCII character in range \x7f to \xff (127 to 255).
Thus only escaping the slash (/) is wrong.

refs #8086
2014-12-29 09:39:23 +01:00
Johannes Meyer 706e5504e6 Escape restriction names manually in Forms\Security\RoleForm
fixes #8086
2014-12-22 10:46:29 +01:00
Johannes Meyer ebf908b1b5 Make db requirement checks more sensitive
fixes #7837
2014-12-01 15:38:10 +01:00
Eric Lippmann f0ece3d88a Revert "Remove permissions and restrictions for now"
This reverts commit 8335bdcb32.

Readd permissions and restrictions.
2014-11-25 16:11:01 +01:00
Eric Lippmann 8335bdcb32 Remove permissions and restrictions for now
Our first beta release will not include permissions and restrictions.
We'll better test it before making it public.
2014-11-20 16:14:00 +01:00
Eric Lippmann e67d937642 Permissions: Allow to set restrictions too 2014-11-20 15:54:00 +01:00
Marius Hein 50c2c02e09 Dashboard: Keep get params through requests
This avoid errors if a user manually refresh an edit dialog.

refs #7751
2014-11-20 14:38:19 +01:00
Marius Hein e600dc8adb Dashboard: Rename component to dashlet
refs #7751
2014-11-20 12:08:50 +01:00
Marius Hein 28e406565b Dashboard: Change component form
refs #7751
2014-11-20 11:31:53 +01:00
Eric Lippmann 2830b13082 Merge branch 'master' into feature/security-gui-5647 2014-11-19 16:31:26 +01:00
Marius Hein 3b190d7d81 Dashboard: Fix design and labels
refs #4537
2014-11-19 15:40:40 +01:00
Eric Lippmann 0c219655e0 Security: Our Config object no longer supports __set, __get and so on
refs #5647
2014-11-19 14:44:53 +01:00
Eric Lippmann f556fc43e9 Security: Remove the restriction form
refs #5647
2014-11-19 14:24:20 +01:00