sftpgo-mirror/internal
Nicola Murino d0f348a46a
WebAdmin and REST API: remove too granular permissions
Our permissions system for admin users is too granular and some
permissions overlap. For example, you can define an administrator
with the "manage_system" permission and not with the "manage_admins"
or "manage_user" permission, but the "manage_system" permission
allows you to restore a backup and then create users and
administrators. The following permissions will be removed:
"manage_admins", "manage_apikeys", "manage_system", "retention_checks",
"manage_event_rules", "manage_roles", "manage_ip_lists". Now you
need to add the "*" permission to replace the removed granular
permissions because the removed permissions allow actions that
should only be allowed to super administrators.
There is no point in having separate, overlapping permissions.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
2024-11-10 10:51:27 +01:00
..
acme EventManager: add datetime placeholder 2024-10-08 19:15:07 +02:00
bundle remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
cmd kms: add support for Oracle Key Vault 2024-10-03 06:59:54 +02:00
command remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
common EventManager: allow to define the allowed system commands 2024-11-09 19:14:45 +01:00
config EventManager: allow to define the allowed system commands 2024-11-09 19:14:45 +01:00
dataprovider WebAdmin and REST API: remove too granular permissions 2024-11-10 10:51:27 +01:00
ftpd fix new lint warnings 2024-08-14 08:46:55 +02:00
httpclient remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
httpd WebAdmin and REST API: remove too granular permissions 2024-11-10 10:51:27 +01:00
httpdtest EventManager: filter action execution based on event status 2024-09-27 20:49:04 +02:00
kms kms: add support for Oracle Key Vault 2024-10-03 06:59:54 +02:00
logger log: fix level for transfer logs 2024-10-03 20:29:28 +02:00
metric remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
mfa remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
plugin plugins: fix passing additional environment variables 2024-11-05 18:07:24 +01:00
service kms: add support for Oracle Key Vault 2024-10-03 06:59:54 +02:00
sftpd fix new lint warnings 2024-08-14 08:46:55 +02:00
smtp smtp: replace deprecated method 2024-08-20 11:28:14 +02:00
telemetry remove end year from Copyright notice in files 2024-01-01 11:31:45 +01:00
util don't allow admins to change their own permissions 2024-11-09 20:33:03 +01:00
version set version to 2.6.2 2024-06-21 19:06:18 +02:00
vfs backports from main 2024-08-12 18:06:08 +02:00
webdavd fix new lint warnings 2024-08-14 08:46:55 +02:00