1764 Commits (20e77c7b54ce560b80b8a7ead0417bb2fb1eb616)

Author	SHA1	Message	Date
Kirill Solomko	20e77c7b54	TT#129162 tighten user access checks ... * add additional centralised checks for inactive and read_only users. * use_userdata_from_session=0 now for all auth realms to cause the data re-fetched from the database, to avoid scenarios when a user is set as inactive or read_only and UI keeps using the cached data. the change only affects cookie and JWT subscriber based sessions as in all other cases, the auth data is fetched from the storage regardless. * add is_active=1 flag for the internal 'system' role, as otherwise access would be permanently denied for it. * default 403 error for denied api requests is changed to "Forbidden" instead of "Forbidden path". Change-Id: I1d6d3c765ca8e017e11845c1f5260243a3963c3b	5 years ago
Flaviu Mates	c1752e7e82	TT#128552 Add filtering by name for /api/billingprofiles ... Change-Id: I8b62b4b7ad4aec3d0538fb84a3b73e451fcb1db1	5 years ago
Kirill Solomko	d17c4be4a5	TT#121250 improve sip_lcr_reload and sip_domain_reload ... * sip_lcr_reload is now called after "commit" in all API endpoints, to correctly reflect updated DB changes. It was correct in /api/peeringrules POST but not correct in DELETE, as well as also not correct in /api/peeringservers and /api/peeringgroups * sip_domain_reload does not check if the domain is successfully reload in kamailio proxy as is logic is redundant, it fails however if domain reload XMLRPC request failed on any available proxy servers. Another reason is by default tcp_conn_wq_max in kamailio-proxy is 32KB by default and that causes an impact when domain.dump XMLRPC is used on very large domain sets (600+), as well as sip_domain_reload has improved performance with the removed XMLRPC domain.dump body parsing. Change-Id: I17c5718198b06b1ce78b2654f3d7c3bd2830f60b	5 years ago
Rene Krenn	40c4ade6ea	TT#118802 log raw perl catalyst request time ... (cherry picked from commit 05f2f1137d6d3ce1deb1880eb1427b94e409c691) Change-Id: I6bda815d2ccf2800a0a352c0d44aaee8039ee8d5	5 years ago
Flaviu Mates	a840fc5224	TT#125850 Add filtering by 'type' for /api/contracts ... Change-Id: Ibc1f1fe4558472523d949cdea30815a08637e138	5 years ago
Kirill Solomko	102e494708	TT#121250 /api/peeringrules fix lcr.reload ... * xmlrpc lcr.reload request is now sent after the transaction is committed, otherwise the reload operation is performed without the newly added changes in the peering rules Change-Id: I728605a8d277b00d02a3f864c84f172306f7b090	5 years ago
Flaviu Mates	e09c478ee1	TT#124275 Add 'Login to CSC' button in subscriber page ... * upon pressing the button, a new session object with selected subscriber's details will be inserted in Redis, and also a new ngcp-panel_subscriber cookie will be created containing the session id of the previously created session object; then the user will be redirected to CSC v1 address where the selected subscriber will be authenticated based on the cookie and Redis info * the new button will be available for admin, reseller, ccare and ccareadmin roles Change-Id: I03952efe4abe18e61884859c466d700a7885ead4	5 years ago
Kirill Solomko	85c7d7c071	TT#123550 add /api/platforminfo virtual endpoint ... * /api/platforminfo does not have its own endpoint file and therefore, does not appear in the rendered documentation. it only supports GET method and renders the template file. the endpoint is designed to provide with the prerendered JSON data containing the current platform configuration. * /api/platforminfo supports both authenticated and anonymous requests, where based on that, the template provides with the corresponding info withing the current scope. Change-Id: Idc8138595eda2c14e7f8dc7ed97cc50039fd1adc	5 years ago
Flaviu Mates	43abaeee4d	TT#119464 Add start_time and end_time filter params to callrecordings ... * the new filter params works as follows: * if start_time is provided, recordings with start time greater than provided value are displayed * if end_time is provided, recordings with end time less than provided value are displayed Change-Id: Ie9cfb88141506581e2b724d4502b88091f9c7a02	5 years ago
Flaviu Mates	884229fc74	TT#123650 Fix 500 error in Panel UI Email Templates ... * Replace wrong usage of 'reseller_id' filter for missed templates resultsedl use 'id' instead, because the query is made directly on resellers table Change-Id: I85bdcda79168979c8b1bb0503ab7bba91c5f8a78	5 years ago
Flaviu Mates	f4cb6933b4	TT#119550 Allow subscribers to manage their registrations ... * give access to subscribers roles to see, create and update own registrations * subscriberadmins can manage all registrations of subscribers under same customer Change-Id: I643121da901b0ed99fc718106a1632da4e1e1936	5 years ago
Flaviu Mates	35d9c3598a	TT#122001 Allow subscribers to access /api/subscriberprofiles ... * subscribers are now allowed to fetch their own subscriber profile, they can't modify them Change-Id: Iabf1244020d0f453257993cf24d4c9036a125397	5 years ago
Gerhard Jungwirth	64c120a5e5	TT#44168 create additional form for subadmin non-pbx subscriber edit ... The fix has been created by Gerhard Jungwirth three years ago for branch 'mr5.5' and was not merged into branch 'master'. It is a follow up master commit to address customer ticket TT#82306. The cherry-pick has been done AS IS, with one small trivial resolution: > + my $is_pbx_customer = $c->stash->{billing_mapping}->product->class eq "pbxaccount"; > my $base_number; > > ++<<<<<<< HEAD > + if($subscriber->contract->product->class eq "pbxaccount") { > ++======= > + if($is_pbx_customer) { > ++>>>>>>> 239d4a385... TT#44168 create additional form for subadmin non-pbx subscriber edit Change-Id: Ie242c4ad44fc21319cdaa29dcca423fe241aab20 (cherry picked from commit 239d4a3859)	5 years ago
Kirill Solomko	1e06df3fdf	TT#114304 /api/resellers?status support multi values ... * /api/resellers 'status' query parameter now supports comma separated multi values e.g.: status=active,locked Change-Id: I16b7499079a7ac7b2070910141ba12fada52bbb4	5 years ago
Kirill Solomko	0484c0d15f	TT#114304 add status query param to /api/resellers ... * it's now possible to filter reselelers by their status (active, terminated), the default return of all resellers has not changed. Change-Id: I6e1f2b6745ac6c3c4a012fe261ee5db810084be3	5 years ago
Alexander Lutay	131e79fba6	TT#88903 Reset 'framed' session state if user open v1 as URL in browser ... If user is typing URL directly in the browser window, the request has no 'referer' header and we should reset the 'framed' session state to prevent corrupted 'framed=1' output which confuses endusers a lot. Change-Id: I8f381daec80dfd95fab6ecbaecfa66438f5d53f0	5 years ago
Kirill Solomko	3e207aa27b	TT#121250 /api/peeringrules use old model ... * PeeringRules.pm is back to the old model for consistency and to be backward compatible * it contains the duplicate check fix Change-Id: I2253f0e740bea7115efb7d1f072ec73498f20040	5 years ago
Kirill Solomko	ba82a55171	TT#121250 fix /api/peeringrules ... * PeeeringRules.pm now uses the Entities approach for fine transaction control that fixes the POST operations Change-Id: Ieb666d3009393404e04171966adc0912f55a8a4f	5 years ago
Rene Krenn	9aaf04efea	TT#120651 susbcriber datatable performance: fix initial page load time ... Change-Id: I76702dfeb73ed3e3125fd2c5663862e31f0c5b7f	5 years ago
Kirill Solomko	87bdb69560	TT#120309 fix datatable escape html rendering ... * in mRender (custom_renderers), "data" variable is a string, therefore data.escapeHtml could not be used * add new function argument "opt", where it is a dedicated hash containing custom passable options, so it now looks as function(data, type, full, opt) * adapted the existing code to include/use the new argument where applicable Change-Id: I4957eece3b2d0f6359cbc8f36caf5a350d7bad95	5 years ago
Flaviu Mates	a9817e52d8	TT#116900 Use multidomain when deleting a registration ... * deleting a registration would fail when the domain of the registrations would not exist due to the fact that multidomain is not enabled Change-Id: If512c0c9ce6c8f7a72deaa5b6a8ebe6737404f2a	5 years ago
Flaviu Mates	b13e487732	TT#118600 Fix /api/callrecordingstreams filter by recording_id ... * change 'call' to 'me.call' to avoid ambigous usage in SQL query, since 'call' is a column in other joined tables Change-Id: I3fb52aa7c42687b6be377e51f50779dd92f61ebe	5 years ago
Flaviu Mates	cece861d1e	TT#113513 Handle duplicate billingprofiles in API ... * Add handling of mysql duplicate billingprofile errors for reseller_id-handle and reseller_id-name combinations Change-Id: Ife81d723f4208202311ca8cf3c3a12e7bf4827a2	5 years ago
Flaviu Mates	bbc5468fa2	TT#108854 Implement /api/userinfo endpoint ... * it will return user's username, role and a structure where information about the user's permitted operations on all api endpoints and permitted operations on the fields of that entity can be found Change-Id: I11d2f5b60d24ca7b70ffc6dcf8ea94f9a3a221d1	5 years ago
Flaviu Mates	8bc9a3974c	TT#108162 Reseller branding primary and secondary colors ... * add color pickers and store the hex code of the colors inside the branding table in panel UI * implement /api/resellerbrandings endpoint, where all things related to reseller branding can be managed; the branding logo will still be retrieved using /api/resellerrandinglogos Change-Id: Ib7ed364811acf67ffd62252d9799a0af8b91e9bc	5 years ago
Alexander Lutay	a7d718cc28	TT#113765 AUI: Remove v1_auth from v1->v2 URL ... It is no longer necessary there (c) Hans-Peter. Change-Id: I7cbb3e18d2f82eec24f9ba4355a3192c7cbf5477	5 years ago
Alexander Lutay	6c86122c37	TT#113251 Create journal 'update' records for 'admins' REST API ... Change-Id: I6867a3e23e9e9c7e04ebb900e8eaf608f49732da	5 years ago
Flaviu Mates	055751eb81	TT#109604 Implement blob preferences upload in Panel UI ... * Create upload and content type form fields for 'blob' type preferences * Implement blob preference upload/download to database * Show blob content in read only text area if content is text Change-Id: Ic4b800f84324eab0aadbf8eeb55c03c770ecc94f	5 years ago
Flaviu Mates	0d0a2faf90	TT#100761 Allow subscribers to access /api/applyrewrites ... * Give subscribers permissions to apply rewrites but only for their own subscriber id Change-Id: I6fdb449190169802ba8d3ed71effb41c60b00125	5 years ago
Rene Krenn	92455d8566	TT#107051 enable "add" for PATCH /billingprofiles/x ... Change-Id: Ifc9e54987eacd5f4b09e15c8866c25e6537619d3	5 years ago
Rene Krenn	00f0614ef9	TT#107051 fix PATCH /billingprofiles/x - peaktimes ... Change-Id: I3d074976f15618d84cfd8ee4694a0fd4250fe091	5 years ago
Rene Krenn	be92558686	TT#105954 /api/invoices: accept 'application/pdf' type ... Change-Id: I5b01d2f627a17bdb527de0f92cf14de0d505aa0e	5 years ago
Kirill Solomko	88d91b8349	TT#106003 fix /api/peeringrules transaction control ... Change-Id: Ic00ad3e4a0f97808ec94b5b36e1b1e909fb00e07	5 years ago
Flaviu Mates	52cbca5430	TT#102054 Add original filename param to device configuration template ... * This will be used to diferentiate between configurations requested by the phone Change-Id: I423f0fe78f994d4c4dee00503dc66fc56e0b52f7	5 years ago
Flaviu Mates	551c8b39f9	TT#103401 Allow subscriber access to /api/mailtofaxsettings/{id} ... * Add subscriber roles to MailToFaxSettingsItem and allow them to only access their settings * Don't return the 'active' field on subsciber requests; instead, return 403 if mail2fax is not active Change-Id: I773df0c21fcba29f9e7b5172160178ff99482964	5 years ago
Kirill Solomko	35316221bf	TT#101300 /api/subscriberlocationmappings fix search by subscriber_id ... Change-Id: Ib2bd10d6537bf3267ee17a4fba16b25100748997	5 years ago
Rene Krenn	c2b5602183	TT#103450 enable lintercept role for interceptions PUT/DELETE ... Change-Id: Ie03a9a7dce7778a580a80a354364dddbd21996f9	5 years ago
Flaviu Mates	c8049ea387	TT#101108 - Fix condition when reseller has no logo ... Change-Id: I1c6213ae039dce2bba8fc80b4212ce78e2165c92	5 years ago
Flaviu Mates	733f4ac68f	TT#101108 Expose panel branding logo via API ... * create /api/resellerbrandinglogos/ endpoint which will return the reseller's branding logo * the endpoint can be used directly with /{reseller_id} or with /?subscriber_id={subscriber_id} to get the logo of subscriber's customer contact reseller Change-Id: I5db19e208ae21cf7c685d46aa77b5032c26554de	5 years ago
Flaviu Mates	e03533c8eb	TT#101100 Fix /api/pbxdevices 500 error introduced with TT#96803 ... * Filtering by subscriber properties introduced a join which confused the use of 'profile_id' for devices Change-Id: I5e8fbdc0a83076b95183dbdb757921c8112e9e00	5 years ago
Flaviu Mates	ded942b740	TT#96502 Introduce duplicate check for /api/cfsourcesets ... * Due to DB unique name constraint, enpoint was returning 500 on duplicate source sets * Proper 422 is now returned Change-Id: I883fbe71aa77364645467941206ea6b272523c03	5 years ago
Flaviu Mates	c50153b1f7	TT#99561 Introduce extension range preference for Customers ... * Limit subscriber's extension to a predefined customer extension range preference (both AP and api) Change-Id: I0b6ac5c24b3838f07cc561e7ee6b7cfabe69385e	5 years ago
Kirill Solomko	96ce7b1143	TT#101300 remove devid_alias field ... * dbaliases->devid_alias field is no longer in use and available via the UI/API Change-Id: I3ec1a82ef76822595aa37e94ec002d11a0cce58c	5 years ago
Kirill Solomko	1885af6b7d	TT#101300 add subscriber location mappings filter by external id ... Change-Id: I2363d615d1bc75fa33a2a512f2d8e3fc6d902aed	5 years ago
Kirill Solomko	822d3fed46	Revert "TT#102056 terminate subscriber on customer termination" ... This reverts commit ce7b9e84b38e3d4079c12326259534e5450add19. Change-Id: I039629e7484d3e5fbceb9e8caf8be99f738580ed	5 years ago
Kirill Solomko	59a1ba298b	TT#102056 fix registration entry removal ... * Registration entries are now removed by registration username + registration domain instead of subscriber username + subscriber domain. That is to account registrations by the device. Change-Id: I86a0d97fabc2dcd0eda6042a018ed35f64c3f031	5 years ago
Kirill Solomko	ce7b9e84b3	TT#102056 terminate subscriber on customer termination ... * When a customer is terminated all != terminated subscribers are set to terminated using the common Utils::Subscriber::terminate() call, so it's on par when each subscriber is selectively terminated. Change-Id: I77394804194ecdb352560047cc8d5b26e3eabc53	5 years ago
Kirill Solomko	50d985c666	TT#101300 add susbcriber location mappings ... * subscrieber location mappings UI/API endpoints * enables terminating incoming calls to a subscriber at another locations (registration entries) Change-Id: I2ba19e55d715a8ac9c6b84b0f7dc055f1621f170	5 years ago
Flaviu Mates	815baf1a8e	TT#100954 Show device id registrations in panel UI and API ... * Modify registrations query to include dbaliases together with subscriber's username Change-Id: I898c433fd690dc207b1969c43a85b37f942f0a50	5 years ago
Flaviu Mates	0c01994388	TT#96803 Enhance /api/pbxdevices filtering ... * Enable filtering by subscriber's pbx_extension and display_name with wildcard at the end of string Change-Id: Ibaee1eddf760be44d11f2df5a9dbc544fe35495c	5 years ago