beenull/sftpgo-mirror

mirror of https://github.com/drakkan/sftpgo.git synced 2024-11-22 07:30:25 +00:00

Author	SHA1	Message	Date
Nicola Murino	3dd412f6e3	WebAdmin and REST API: remove too granular permissions Our permissions system for admin users is too granular and some permissions overlap. For example, you can define an administrator with the "manage_system" permission and not with the "manage_admins" or "manage_user" permission, but the "manage_system" permission allows you to restore a backup and then create users and administrators. The following permissions will be removed: "manage_admins", "manage_apikeys", "manage_system", "retention_checks", "manage_event_rules", "manage_roles", "manage_ip_lists". Now you need to add the "*" permission to replace the removed granular permissions because the removed permissions allow actions that should only be allowed to super administrators. There is no point in having separate, overlapping permissions. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-11-10 10:46:28 +01:00
Nicola Murino	ef98ee7d11	don't allow admins to change their own permissions Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-11-09 20:24:35 +01:00
Nicola Murino	88b1850b58	EventManager: allow to define the allowed system commands Some checks failed CI / Test and deploy (push) Has been cancelled Details Code scanning - action / CodeQL-Build (push) Has been cancelled Details CI / Test build flags (push) Has been cancelled Details CI / Test with PgSQL/MySQL/Cockroach (push) Has been cancelled Details CI / Build Linux packages (push) Has been cancelled Details CI / golangci-lint (push) Has been cancelled Details Docker / Build (push) Has been cancelled Details Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-11-01 11:37:33 +01:00
Nicola Murino	d8691d1e1a	update translations Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-10-13 17:00:17 +02:00
Nicola Murino	5cb1b9c1e9	Web: add CheckRedirect to pages using baselogin.html Some checks failed Code scanning - action / CodeQL-Build (push) Has been cancelled Details CI / Test and deploy (push) Has been cancelled Details CI / Test build flags (push) Has been cancelled Details CI / Test with PgSQL/MySQL/Cockroach (push) Has been cancelled Details CI / Build Linux packages (push) Has been cancelled Details CI / golangci-lint (push) Has been cancelled Details Docker / Build (push) Has been cancelled Details Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-10-12 12:54:21 +02:00
Nicola Murino	eba4c93efd	user: add additional emails Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-10-11 19:20:51 +02:00
Nicola Murino	27e98b85ce	WebAdmin: hide certs if they cannot be used Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-09-27 15:53:12 +02:00
Nicola Murino	126cb1ee0d	remove some useless hooks Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-09-27 15:52:51 +02:00
Nicola Murino	eeef23139d	EventManager: filter action execution based on event status Some checks failed Docker / Build (distroless, false, ubuntu-latest) (push) Has been cancelled Details CI / golangci-lint (push) Has been cancelled Details Docker / Build (alpine, false, ubuntu-latest) (push) Has been cancelled Details Docker / Build (alpine, true, ubuntu-latest) (push) Has been cancelled Details Docker / Build (debian, false, ubuntu-latest) (push) Has been cancelled Details Docker / Build (debian, true, ubuntu-latest) (push) Has been cancelled Details Code scanning - action / CodeQL-Build (push) Has been cancelled Details CI / Test and deploy (1.22, macos-latest, true) (push) Has been cancelled Details CI / Test and deploy (1.22, ubuntu-latest, true) (push) Has been cancelled Details CI / Test and deploy (1.22, windows-latest, false) (push) Has been cancelled Details CI / Test build flags (push) Has been cancelled Details CI / Test with PgSQL/MySQL/Cockroach (push) Has been cancelled Details CI / Build Linux packages (aarch64, ubuntu18.04, go1.22.7, arm64) (push) Has been cancelled Details CI / Build Linux packages (amd64, ubuntu:18.04, go1.22.7, amd64) (push) Has been cancelled Details CI / Build Linux packages (armv7, ubuntu18.04, go1.22.7, arm7) (push) Has been cancelled Details CI / Build Linux packages (ppc64le, ubuntu18.04, go1.22.7, ppc64le) (push) Has been cancelled Details Docker / Build (debian-plugins, true, ubuntu-latest) (push) Has been cancelled Details Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-09-23 19:55:03 +02:00
Nicola Murino	b9b370fbb8	add some pre-validation hooks Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-08-17 09:11:42 +02:00
Nicola Murino	2fbf608895	S3: add SSE customer key Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-08-15 10:09:06 +02:00
Nicola Murino	954c36c0a2	add fs providers hook Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-08-10 15:57:05 +02:00
Nicola Murino	81433e00d1	event action: add update modtime to fs rename Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-08-09 20:18:33 +02:00
Nicola Murino	d94f80c8da	replace utils.Contains with slices.Contains Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-07-24 18:27:13 +02:00
Nicola Murino	b5c821795a	allow to customize name and log from the WebUI Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-07-24 09:14:27 +02:00
Nicola Murino	363770ab84	WebClient shares: add a logout button Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-18 19:10:32 +02:00
Nicola Murino	bd5b32101f	csrf: reuse the cookie in reset password no need to generate a new cookie each time. Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-15 15:18:17 +02:00
Nicola Murino	8294952474	WebUIs: refactor CSRF Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-06-14 18:09:32 +02:00
Nicola Murino	5d24d665bd	add an util method to convert []byte to string Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-05-08 19:01:58 +02:00
Nicola Murino	0a8a0ee771	revert #450 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-27 10:50:25 +02:00
Nicola Murino	2bcf05ca45	refactor for secrets management in API and private key handling in SFTPFs Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-26 16:17:24 +02:00
Nicola Murino	1196727448	dataretention: remove ignore_user_permissions Required permissions are now automatically granted as for any other filesystem action Fixes #1564 Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-04-01 15:07:03 +02:00
Nicola Murino	cc9a0d4dc2	add time-based access restrictions Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-17 11:30:03 +01:00
Nicola Murino	4d357a6a57	EventManager: allow to check for inactive users Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-03-04 19:48:10 +01:00
Nicola Murino	de089e51fd	Web: allow to require password change and two-factor for admins Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-21 20:45:10 +01:00
Nicola Murino	e5836c8118	WebUI: add a JSON helper function Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-04 18:16:10 +01:00
Nicola Murino	71e01ab26d	new WebAdmin: add test cases Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-03 12:42:05 +01:00
Nicola Murino	ad80d4e475	WIP new WebAdmin: event rules Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-02-01 20:32:43 +01:00
Nicola Murino	c85601146d	WIP new WebAdmin: event actions Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-31 20:49:25 +01:00
Nicola Murino	143d4611ba	WIP new WebAdmin: events page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-28 19:38:01 +01:00
Nicola Murino	69da5c10c6	WIP new WebAdmin: configs page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-27 12:48:15 +01:00
Nicola Murino	d01fccf28c	WIP new WebAdmin: maintenance page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-26 21:03:41 +01:00
Nicola Murino	9fcff83f8f	WIP new WebAdmin: status page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-25 19:26:51 +01:00
Nicola Murino	8180b75ef1	WIP new WebAdmin: IP lists pages Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-24 19:23:15 +01:00
Nicola Murino	d381304136	WIP new WebAdmin: admin/admins pages Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-22 20:22:41 +01:00
Nicola Murino	e38350e8b3	WIP new WebAdmin: role page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-21 17:19:25 +01:00
Nicola Murino	3f479c5537	WIP new WebAdmin: roles page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-21 16:49:04 +01:00
Nicola Murino	8648351fc7	WIP new WebAdmin: connections page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-20 15:35:05 +01:00
Nicola Murino	73b2573b14	WIP new WebAdmin: two factor auth page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-18 20:25:07 +01:00
Nicola Murino	91802fad3e	WIP new WebAdmin: profile, change password, message pages Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-18 19:18:57 +01:00
Nicola Murino	5ac99ee556	WIP new WebAdmin: folder page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-16 19:51:37 +01:00
Nicola Murino	d939a82225	user: add TLS certificates Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 21:36:23 +01:00
Nicola Murino	0722c4369b	WIP new WebAdmin: folders page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 16:59:27 +01:00
Nicola Murino	1a0f734a9c	WIP new WebAdmin: remove some hard coded strings so they can be localized Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 09:41:39 +01:00
Nicola Murino	bf94f8b87c	WIP new WebAdmin: group page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-14 09:09:42 +01:00
Nicola Murino	5c8214e121	WIP new WebAdmin: groups page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-11 19:26:13 +01:00
Nicola Murino	86eab21be8	WebAdmin: fix parsing form field some field names changed with the new UI Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-10 18:49:20 +01:00
Nicola Murino	e1b5d2fe39	WebAdmin: use the new UI for user pages Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-09 19:54:08 +01:00
Nicola Murino	ca880f6cbb	WebAdmin: completed base page Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-01 20:09:15 +01:00
Nicola Murino	784b7585c1	remove end year from Copyright notice in files so we don't have to update all the files every year Signed-off-by: Nicola Murino <nicola.murino@gmail.com>	2024-01-01 11:31:45 +01:00

1 2 3

113 commits