Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-08 23:28:39 +03:00
Code Issues Packages Projects Releases Wiki Activity
1,960 Commits 10 Branches 53 Tags
d0f348a46a85d6280b2d3328fb056f646f650c47
Commit Graph

165 Commits

Author SHA1 Message Date
Nicola Murino
d0f348a46a WebAdmin and REST API: remove too granular permissions 
Our permissions system for admin users is too granular and some
permissions overlap. For example, you can define an administrator
with the "manage_system" permission and not with the "manage_admins"
or "manage_user" permission, but the "manage_system" permission
allows you to restore a backup and then create users and
administrators. The following permissions will be removed:
"manage_admins", "manage_apikeys", "manage_system", "retention_checks",
"manage_event_rules", "manage_roles", "manage_ip_lists". Now you
need to add the "*" permission to replace the removed granular
permissions because the removed permissions allow actions that
should only be allowed to super administrators.
There is no point in having separate, overlapping permissions.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-10 10:51:27 +01:00
Nicola Murino
5c163ed592 EventManager: allow to define the allowed system commands 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-09 19:14:45 +01:00
Nicola Murino
256e3c1e3e node: use a plain string as key 
Some KMS providers only allow UTF-8 characters

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-28 14:33:38 +01:00
Nicola Murino
c74f391caf EventManager: filter action execution based on event status 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-09-27 20:49:04 +02:00
Nicola Murino
121d5ae34d fix new lint warnings 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-08-14 08:46:55 +02:00
Nicola Murino
952faaf76f EventManager: add an action to rotate the log file 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-06-04 19:53:07 +02:00
Nicola Murino
b83aaa863f make sure to return a fully populated user after plugin auth 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-06-04 19:53:02 +02:00
Nicola Murino
a215fad41a EventManager: fix adding ObjectDataString for provider events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-31 20:02:29 +02:00
Nicola Murino
eb0c6549c4 micro optimization 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-12 18:10:03 +02:00
Nicola Murino
4502509c2d pgsql: validate target_session_attrs 
silently ignore invalid values

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-09 19:55:12 +02:00
Nicola Murino
5d24d665bd add an util method to convert []byte to string 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-08 19:01:58 +02:00
Nicola Murino
a1af33c6aa WebClient: allow to set TLS certificates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-03 18:30:03 +02:00
Nicola Murino
0a8a0ee771 revert #450 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-27 10:50:25 +02:00
Nicola Murino
1fc0f21506 hooks: remove logging output from external programs 
This reverts #1208 because the contributor did not respond to our
request to sign the CLA

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-26 11:13:16 +02:00
Nicola Murino
26d19abf61 remove reading data provider username and password from file 
This reverts #1455 because the contributor cannot sign the CLA

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-26 10:57:38 +02:00
Nicola Murino
a38fd26cf6 minor refactor to memory provider initialization 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-20 16:45:20 +02:00
Nicola Murino
950cf67e4c dataprovider: small refactor for password check 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-18 18:23:16 +02:00
Nicola Murino
150a338166 removed unused methods 
these methods were used in the old UIs

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-14 09:23:57 +02:00
Nicola Murino
ff48386cc8 store used data transfer as big integer 
we originally stored these values as MB but since we use bytes now,
an integer field is not enough.

Fixes #1575

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-02 18:38:22 +02:00
Nicola Murino
1196727448 dataretention: remove ignore_user_permissions 
Required permissions are now automatically granted as for any other
filesystem action

Fixes #1564

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-01 15:07:03 +02:00
Nicola Murino
cc9a0d4dc2 add time-based access restrictions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-17 11:30:03 +01:00
Nicola Murino
26d3105f54 groups: add role placeholder 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-12 18:21:50 +01:00
Nicola Murino
f38966c6ac WebClient: refactor long-running tasks to improve browser compatibility 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-11 18:19:57 +01:00
Nicola Murino
4d357a6a57 EventManager: allow to check for inactive users 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-04 19:48:10 +01:00
Nicola Murino
8b2188fcb6 remove some useless nil checks 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-02 18:49:07 +01:00
Nicola Murino
92911bda2b require at least 2048 bits for RSA certificates/keys 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-25 11:12:57 +01:00
Nicola Murino
f7d9e56cac ssh: remove moduli, log negotiated algorithms 
Fixes #1324

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-24 20:35:09 +01:00
Nicola Murino
a577d8b3cd WebAdmin: allow to disable 2FA 
Before it was only possible using REST API

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-23 18:24:07 +01:00
Nicola Murino
9a6a65931e two-factor auth: fixed validation of conflicting settings 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-22 18:20:51 +01:00
Nicola Murino
de089e51fd Web: allow to require password change and two-factor for admins 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-21 20:45:10 +01:00
Nicola Murino
51ae2d7301 add copy permission 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-20 18:19:09 +01:00
Nicola Murino
e61fb42cbc remove metadata plugin 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-17 12:30:47 +01:00
Nicola Murino
1ff55bbfa7 add DirLister interface 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-15 20:53:56 +01:00
Nicola Murino
c49553abd0 keyboard interactive: ask only the passcode if it is the second step 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-05 19:02:01 +01:00
Nicola Murino
6074ed21f7 dataproviders: return an uniform error for foreign key violations 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-03 14:24:50 +01:00
Nicola Murino
ad80d4e475 WIP new WebAdmin: event rules 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-01 20:32:43 +01:00
Nicola Murino
c85601146d WIP new WebAdmin: event actions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-31 20:49:25 +01:00
Nicola Murino
caa1d70aab WebUI: add a base template for info messages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-28 10:22:16 +01:00
Nicola Murino
69da5c10c6 WIP new WebAdmin: configs page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-27 12:48:15 +01:00
Nicola Murino
8180b75ef1 WIP new WebAdmin: IP lists pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-24 19:23:15 +01:00
Nicola Murino
d381304136 WIP new WebAdmin: admin/admins pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-22 20:22:41 +01:00
Nicola Murino
e38350e8b3 WIP new WebAdmin: role page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-21 17:19:25 +01:00
Nicola Murino
91802fad3e WIP new WebAdmin: profile, change password, message pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-18 19:18:57 +01:00
Nicola Murino
87451560e3 normalize common database errors 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-17 17:36:35 +01:00
Nicola Murino
d939a82225 user: add TLS certificates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-14 21:36:23 +01:00
Nicola Murino
5c8214e121 WIP new WebAdmin: groups page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-11 19:26:13 +01:00
Nicola Murino
e1b5d2fe39 WebAdmin: use the new UI for user pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-09 19:54:08 +01:00
Nicola Murino
784b7585c1 remove end year from Copyright notice in files 
so we don't have to update all the files every year

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-01 11:31:45 +01:00
Nicola Murino
8ce9af4adf dataprovider: sort related resources by name 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-12-10 17:50:48 +01:00
Nicola Murino
c71f0426ae WebClient WIP: add support for localizations 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2023-12-10 16:40:13 +01:00