Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-09 08:15:13 +03:00
Code Issues Packages Projects Releases Wiki Activity
2,093 Commits 10 Branches 53 Tags
e8c5f8ed813eb68067b3de44adb304eed27b99de
Commit Graph

66 Commits

Author SHA1 Message Date
Nicola Murino
e8c5f8ed81 command actions: restrict passing env vars 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2025-01-13 20:58:32 +01:00
Nicola Murino
dee3f3f87a EventManager: add placeholder for filename without extension 
Fixes #1828
Fixes #1833

Co-authored-by: Per Osbeck <per.osbeck@consid.se>
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-12-23 19:08:48 +01:00
Nicola Murino
bfe6c58133 don't allow DSA keys 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-12-18 19:01:15 +01:00
Nicola Murino
d3e76898cd WebAdmin: refactor template permissions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-26 20:39:36 +01:00
Nicola Murino
7bffed712a events: add copy action 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-10 15:00:11 +01:00
Nicola Murino
3dd412f6e3 WebAdmin and REST API: remove too granular permissions 
Our permissions system for admin users is too granular and some
permissions overlap. For example, you can define an administrator
with the "manage_system" permission and not with the "manage_admins"
or "manage_user" permission, but the "manage_system" permission
allows you to restore a backup and then create users and
administrators. The following permissions will be removed:
"manage_admins", "manage_apikeys", "manage_system", "retention_checks",
"manage_event_rules", "manage_roles", "manage_ip_lists". Now you
need to add the "*" permission to replace the removed granular
permissions because the removed permissions allow actions that
should only be allowed to super administrators.
There is no point in having separate, overlapping permissions.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-10 10:46:28 +01:00
Nicola Murino
ef98ee7d11 don't allow admins to change their own permissions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-11-09 20:24:35 +01:00
Nicola Murino
8d697bcc94 WebClient: enforce 2fa and password requirements also with OIDC 
password and 2fa can be used with other protocols

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-21 20:40:44 +02:00
Nicola Murino
d8691d1e1a update translations 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-13 17:00:17 +02:00
Nicola Murino
b23e67ae6a EventManager: add escaped virtual path 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-12 11:25:07 +02:00
Nicola Murino
eba4c93efd user: add additional emails 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-11 19:20:51 +02:00
Nicola Murino
4103344989 EventManager: add datetime placeholder 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-08 18:39:00 +02:00
Nicola Murino
3b2f709aeb WebClient: improve readability of upload progress 
Fixes #1773

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-03 19:07:27 +02:00
Nicola Murino
2ecd20d444 WebClient: make sure to upload files after the queue is populated 
Ugly hack to prevent to start uploading files before the upload
queue is fully populated.

We should investigate if there is a better way

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-10-03 19:06:33 +02:00
Nicola Murino
eeef23139d EventManager: filter action execution based on event status 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-09-23 19:55:03 +02:00
Nicola Murino
eb5ffb940e update translations 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-09-01 13:44:16 +02:00
Nicola Murino
2fbf608895 S3: add SSE customer key 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-08-15 10:09:06 +02:00
Nicola Murino
81433e00d1 event action: add update modtime to fs rename 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-08-09 20:18:33 +02:00
Nicola Murino
b5c821795a allow to customize name and log from the WebUI 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-07-24 09:14:27 +02:00
Nicola Murino
55be9f0b9c EventManager: allow to configure the timezone to use for the scheduler 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-06-30 18:52:59 +02:00
Nicola Murino
0cddcba5a7 EventManager: add an action to rotate the log file 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-06-04 19:51:52 +02:00
Nicola Murino
a1af33c6aa WebClient: allow to set TLS certificates 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-05-03 18:30:03 +02:00
Nicola Murino
456517af87 notifier plugin: add support for login succeeded events 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-10 18:39:08 +02:00
Nicola Murino
1196727448 dataretention: remove ignore_user_permissions 
Required permissions are now automatically granted as for any other
filesystem action

Fixes #1564

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-04-01 15:07:03 +02:00
Nicola Murino
fc023748c1 WebClient: improve file uploads 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-31 20:42:28 +02:00
Nicola Murino
1dd63c29ec update translations 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-17 11:53:45 +01:00
Nicola Murino
cc9a0d4dc2 add time-based access restrictions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-17 11:30:03 +01:00
Nicola Murino
4d357a6a57 EventManager: allow to check for inactive users 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-03-04 19:48:10 +01:00
Nicola Murino
92911bda2b require at least 2048 bits for RSA certificates/keys 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-25 11:12:57 +01:00
Nicola Murino
a577d8b3cd WebAdmin: allow to disable 2FA 
Before it was only possible using REST API

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-23 18:24:07 +01:00
Nicola Murino
9a6a65931e two-factor auth: fixed validation of conflicting settings 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-22 18:20:51 +01:00
Nicola Murino
de089e51fd Web: allow to require password change and two-factor for admins 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-21 20:45:10 +01:00
Nicola Murino
e5fc1bd574 docs: replace the images relating to the old theme 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-18 19:31:37 +01:00
Nicola Murino
d92f85d1dd WebClient: improve error message when trying to move non-empty folder 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-18 11:22:41 +01:00
Nicola Murino
e61fb42cbc remove metadata plugin 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-17 12:30:47 +01:00
Nicola Murino
c60eb050ef WebAdmin: improve the error message when trying to delete referenced resources 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-05 19:18:37 +01:00
Nicola Murino
d7975d8d76 WebAdmin: add expired to the status in users page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-05 19:03:05 +01:00
Nicola Murino
ad80d4e475 WIP new WebAdmin: event rules 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-02-01 20:32:43 +01:00
Nicola Murino
c85601146d WIP new WebAdmin: event actions 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-31 20:49:25 +01:00
Nicola Murino
b18b37042d WIP new WebAdmin: add missing translations for events page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-29 10:49:21 +01:00
Nicola Murino
143d4611ba WIP new WebAdmin: events page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-28 19:38:01 +01:00
Nicola Murino
69da5c10c6 WIP new WebAdmin: configs page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-27 12:48:15 +01:00
Nicola Murino
d01fccf28c WIP new WebAdmin: maintenance page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-26 21:03:41 +01:00
Nicola Murino
9fcff83f8f WIP new WebAdmin: status page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-25 19:26:51 +01:00
Nicola Murino
8180b75ef1 WIP new WebAdmin: IP lists pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-24 19:23:15 +01:00
Nicola Murino
d381304136 WIP new WebAdmin: admin/admins pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-22 20:22:41 +01:00
Nicola Murino
e38350e8b3 WIP new WebAdmin: role page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-21 17:19:25 +01:00
Nicola Murino
3f479c5537 WIP new WebAdmin: roles page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-21 16:49:04 +01:00
Nicola Murino
8648351fc7 WIP new WebAdmin: connections page 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-20 15:35:05 +01:00
Nicola Murino
91802fad3e WIP new WebAdmin: profile, change password, message pages 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
 2024-01-18 19:18:57 +01:00