Commit graph

105 commits

Author SHA1 Message Date
Jan Böhmer
0e5613b57b Forbid access to homepage if a user has no allow permission
This allows to block access to everything (even the homepage) for anonymous access. This fixes issue #290
2023-08-20 12:33:08 +02:00
Jan Böhmer
d20153c569 Added basic logic for impersonation 2023-07-04 00:31:13 +02:00
Jan Böhmer
e8771ea118 Fixed some more phpstan issues 2023-06-18 00:00:58 +02:00
Jan Böhmer
6a2ff9d153 Added declare strict types to all files 2023-06-11 18:59:07 +02:00
Jan Böhmer
684334ba22 Improved code style of tests 2023-06-11 15:02:59 +02:00
Jan Böhmer
5629215ce4 Use imports instead of FQNs 2023-06-11 15:00:28 +02:00
Jan Böhmer
7ee01d9a05 Applied rector with PHP8.1 migration rules 2023-06-11 14:17:19 +02:00
Jan Böhmer
8c430a3af0 Fixed tests 2023-06-11 13:42:45 +02:00
Jan Böhmer
a43af180a7 Applied rector rules up to symfony 6.2 2023-05-28 01:21:05 +02:00
Jan Böhmer
c24019fd57 Fixed error preventing the service container from compiling 2023-05-27 20:46:02 +02:00
Jan Böhmer
5ec676c40c Fixed static analysis issue 2023-05-27 19:29:00 +02:00
Jan Böhmer
379f7ef865 Implemented proper voters for attachments and parameters, so we can decide access for log details 2023-05-27 19:17:27 +02:00
Jan Böhmer
6a1aefa5a5 Allow access to log detail page (only) if a user has permission to show_history of an entity 2023-05-16 00:05:54 +02:00
Jan Böhmer
4c6ceab8e8 Merge branch 'master' into log_detail_page 2023-04-29 22:46:38 +02:00
Jan Böhmer
d04d743520 Fixed typos 2023-04-15 23:14:53 +02:00
Jan Böhmer
63df16a369 Removed unused imports 2023-04-15 22:27:19 +02:00
Jan Böhmer
29d1d49aca Fixed some more inspection issues 2023-04-15 22:05:29 +02:00
Jan Böhmer
1cee1abe00 Fixed some return type deprecation messages 2023-04-15 19:33:39 +02:00
Jan Böhmer
4107535b19 Added basic log entry info page 2023-04-10 00:30:23 +02:00
Jan Böhmer
b0d2a22f62 Make user info page public for all logged in user 2023-04-08 01:04:10 +02:00
Jan Böhmer
a7ff690891 Restrict part lot withdraw/add/move operations to the owner of a part lot 2023-04-02 23:35:18 +02:00
Jan Böhmer
8fad743e85 Allow to select the priority of SAML role mapping based on the order in the configuration option 2023-03-04 16:52:17 +01:00
Jan Böhmer
8a18951562 Fixed static analysis issue. 2023-02-28 17:03:57 +01:00
Jan Böhmer
5e85c52a57 Allow to automatically assign SAML users to a group based on SAML attributes 2023-02-27 23:47:42 +01:00
Jan Böhmer
99f04d71af Revert "Moved all user info updating logic into SAMLUserFactory"
This reverts commit 960ee342e4.
2023-02-27 22:28:23 +01:00
Jan Böhmer
960ee342e4 Moved all user info updating logic into SAMLUserFactory 2023-02-24 00:12:44 +01:00
Jan Böhmer
c831d57614 Added an console command to convert local to SAML users and vice versa 2023-02-23 23:36:40 +01:00
Jan Böhmer
586a57c2c9 Allow X500 attributes for user info and added some tests 2023-02-21 23:41:02 +01:00
Jan Böhmer
b13655e951 Prevent login of local users via SSO with the same username 2023-02-21 22:36:43 +01:00
Jan Böhmer
97c3b9002a Mark SAML users as so in database and disable local password changing then. 2023-02-21 00:29:50 +01:00
Jan Böhmer
78ec0f1ea3 Create a new DB user when somebody logs in using SAML 2023-02-20 23:04:20 +01:00
Jan Böhmer
7b6a906d98 Renamed "devices" permission to "projects" 2023-01-08 20:10:58 +01:00
Jan Böhmer
60d5776cb7 Added permission to control if a user is allowed to withdraw/add/move parts 2023-01-07 21:23:36 +01:00
Jan Böhmer
0c7ec9f0c7 Added some basic DB fields for the new project system 2022-12-18 20:34:25 +01:00
Jan Böhmer
68462185ba Removed old GPLv2 copyright header 2022-11-29 22:28:53 +01:00
Jan Böhmer
498cc07583 Added copyright/license info to files 2022-11-29 21:21:26 +01:00
Jan Böhmer
df11f62a2f Fixed PHPstan issues 2022-11-27 16:53:44 +01:00
Jan Böhmer
c6ad14d641 Show a more helpfull error message on login when a user is disabled.
Before a generic invalid credentials message was shown, now a hint about the disabled status is shown.
2022-11-15 00:25:56 +01:00
Jan Böhmer
b0c027f805 Renamed PermissionResolver service to PermissionService 2022-11-14 20:15:06 +01:00
Jan Böhmer
5829d42968 Fixed voters. 2022-11-13 21:01:40 +01:00
Jan Böhmer
41450b8bd3 Fixed access to typeahead controllers. 2022-11-09 23:33:50 +01:00
Jan Böhmer
5e06557cf0 Removed field permissions from Part edit page 2022-11-06 21:29:03 +01:00
Jan Böhmer
2f9e9c5279 Made the access to an attachment depending on the access rights of the associated elemenst 2022-11-02 23:27:44 +01:00
Jan Böhmer
676235a2d3 Fixed some exception about non existing part_attachments permission 2022-11-02 23:20:30 +01:00
Jan Böhmer
3e85fc4d42 Improved access control for part lists. 2022-10-31 23:10:21 +01:00
Jan Böhmer
d0f7949bc9 Hide trees in sidebar, if user does not have permission to show them (and protect the JSON endpoints) 2022-10-31 22:47:45 +01:00
Jan Böhmer
687ee80255 Save permissions as JSON in user/group entities. 2022-10-30 21:51:24 +01:00
Jan Böhmer
8bc2c994d2 Removed ElementPermissionListener and ColumnSecurity annotationn 2022-09-18 23:38:01 +02:00
Jan Böhmer
51e05a8669 Use typed properties 2022-09-18 22:59:31 +02:00
Jan Böhmer
5fd608f42a Fixed some deprecations. 2022-08-14 19:09:07 +02:00