674 Commits (2b3536a0721a29b726e23b39ea13a3ed7cf585d8)

Author	SHA1	Message	Date
Rene Krenn	2b3536a072	TT#121500 fix missing mos_data in /api/callists ... Change-Id: I4e958dd6ec05042c6ee18bbd7ed7186792a6be50 (cherry picked from commit 325903c14d)	4 years ago
Kirill Solomko	2e1cba06bb	TT#130450 use uuid in /api/cfdestinationsets /api/cfmappings ... * unify the logic and use uuid in /api/cfdestinationsets and /api/cfmappings if the subscriber's primary number is empty Change-Id: Ibdb7e2a2bcd33165be5ec1d92c4f1df24f59405a (cherry picked from commit 1dfdad0a8f)	4 years ago
Flaviu Mates	890d44206e	TT#126601 Implement /api/authtokens endpoint ... * the endpoint will receive "type" (expires|onetime) and "expires" (positive integer representing seconds) * type will define the expiray method for the token; onetime: the token expires as soon as it's used, or after "expires" seconds if not used expires: the token can be used multiple times until it expires according to the "expires" param value * login_jwt endpoint for generating the JWT token for subscribers has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * admin_login_jwt endpoint for generating the JWT token for admins has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * login_jwt and amin_login_jwt will respond with 403 "Forbidden" if the token role stored in Redis does not match the role of the user that generated it * /api/authtokens is hidden from documentation for now Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8 (cherry picked from commit 9b422ddabf)	4 years ago
Kirill Solomko	6df13ee59e	TT#127805 remove temp transcoded files ... * temp files created for transcoding operations are now correctly removed Change-Id: Ie95fccd2ed2a533060e4abc2fa3593c9f951225a (cherry picked from commit d3566d0aa8)	4 years ago
Flaviu Mates	f4cb6933b4	TT#119550 Allow subscribers to manage their registrations ... * give access to subscribers roles to see, create and update own registrations * subscriberadmins can manage all registrations of subscribers under same customer Change-Id: I643121da901b0ed99fc718106a1632da4e1e1936	4 years ago
Flaviu Mates	35d9c3598a	TT#122001 Allow subscribers to access /api/subscriberprofiles ... * subscribers are now allowed to fetch their own subscriber profile, they can't modify them Change-Id: Iabf1244020d0f453257993cf24d4c9036a125397	4 years ago
Flaviu Mates	e66a8689ac	TT#119900 Expose slots id in /api/autoattendants ... Change-Id: I613eca8309cd4f446ca957d6a944cd7e21d87bfb	4 years ago
Flaviu Mates	232cf704c0	TT#119200 Expose subscriber object on /api/autoattendants ... * implement support for 'expand' param which, when used with the api call, will modify the response to contain the subscriber object Change-Id: Id25dc0bb258bc777d698e043ea8ddc785e12f68a	4 years ago
Flaviu Mates	67ca4d5a00	TT#114703 Use config flags password_(sip|web)_expose_subadmin in api ... Change-Id: I289a3683c09c098d52c1ddb5a489c8c2093f9c99	4 years ago
Rene Krenn	a916bd3c4f	TT#116703 prevent entering duplicate alias numbers ... Change-Id: I3d35f87738bb6d73f62b300e487a113b45223ad1	4 years ago
Flaviu Mates	221572d606	TT#113767 Fix 500 error on /api/customerpreferences ... * ccare role was ommited because of a typo when fetching the result set for customer preferences; changing ccareadmin to ccare in the reseller condition fixes the issue Change-Id: Id387953901295b772c6d57e9a925cff85847ad68	4 years ago
Flaviu Mates	bbc5468fa2	TT#108854 Implement /api/userinfo endpoint ... * it will return user's username, role and a structure where information about the user's permitted operations on all api endpoints and permitted operations on the fields of that entity can be found Change-Id: I11d2f5b60d24ca7b70ffc6dcf8ea94f9a3a221d1	4 years ago
Flaviu Mates	8bc9a3974c	TT#108162 Reseller branding primary and secondary colors ... * add color pickers and store the hex code of the colors inside the branding table in panel UI * implement /api/resellerbrandings endpoint, where all things related to reseller branding can be managed; the branding logo will still be retrieved using /api/resellerrandinglogos Change-Id: Ib7ed364811acf67ffd62252d9799a0af8b91e9bc	4 years ago
Rene Krenn	645231c274	TT#109402 fix PATCHing fraud notification status ... Change-Id: I04dcef51641102314cfc034222e6696c69f110e8	4 years ago
Rene Krenn	00f0614ef9	TT#107051 fix PATCH /billingprofiles/x - peaktimes ... Change-Id: I3d074976f15618d84cfd8ee4694a0fd4250fe091	4 years ago
Flaviu Mates	b79d68e865	TT#104760 Fix non-master admin privileges managing in API ... * Forbid non-master admin to change own is_master, read_only, and is_acitve flags; we have this logic in old UI already in place Change-Id: I81ab266d942e32dfb560ba488e9fd471ebc923f4	4 years ago
Rene Krenn	8238204682	TT#105100 fix update case for webpasswd db encrytion ... Change-Id: I91de91430434edef744c6b3791749ea81053d1cb	4 years ago
Flaviu Mates	233be55b9f	TT#104174 Add last_secret_key_modify readonly field on /api/mailtofaxsettings ... Change-Id: I7ebd3b46e0c7e1cbce34e921d0703bcbbdd9f42d	4 years ago
Flaviu Mates	551c8b39f9	TT#103401 Allow subscriber access to /api/mailtofaxsettings/{id} ... * Add subscriber roles to MailToFaxSettingsItem and allow them to only access their settings * Don't return the 'active' field on subsciber requests; instead, return 403 if mail2fax is not active Change-Id: I773df0c21fcba29f9e7b5172160178ff99482964	5 years ago
Flaviu Mates	733f4ac68f	TT#101108 Expose panel branding logo via API ... * create /api/resellerbrandinglogos/ endpoint which will return the reseller's branding logo * the endpoint can be used directly with /{reseller_id} or with /?subscriber_id={subscriber_id} to get the logo of subscriber's customer contact reseller Change-Id: I5db19e208ae21cf7c685d46aa77b5032c26554de	5 years ago
Flaviu Mates	ded942b740	TT#96502 Introduce duplicate check for /api/cfsourcesets ... * Due to DB unique name constraint, enpoint was returning 500 on duplicate source sets * Proper 422 is now returned Change-Id: I883fbe71aa77364645467941206ea6b272523c03	5 years ago
Flaviu Mates	c50153b1f7	TT#99561 Introduce extension range preference for Customers ... * Limit subscriber's extension to a predefined customer extension range preference (both AP and api) Change-Id: I0b6ac5c24b3838f07cc561e7ee6b7cfabe69385e	5 years ago
Kirill Solomko	96ce7b1143	TT#101300 remove devid_alias field ... * dbaliases->devid_alias field is no longer in use and available via the UI/API Change-Id: I3ec1a82ef76822595aa37e94ec002d11a0cce58c	5 years ago
Kirill Solomko	822d3fed46	Revert "TT#102056 terminate subscriber on customer termination" ... This reverts commit ce7b9e84b38e3d4079c12326259534e5450add19. Change-Id: I039629e7484d3e5fbceb9e8caf8be99f738580ed	5 years ago
Kirill Solomko	ce7b9e84b3	TT#102056 terminate subscriber on customer termination ... * When a customer is terminated all != terminated subscribers are set to terminated using the common Utils::Subscriber::terminate() call, so it's on par when each subscriber is selectively terminated. Change-Id: I77394804194ecdb352560047cc8d5b26e3eabc53	5 years ago
Kirill Solomko	50d985c666	TT#101300 add susbcriber location mappings ... * subscrieber location mappings UI/API endpoints * enables terminating incoming calls to a subscriber at another locations (registration entries) Change-Id: I2ba19e55d715a8ac9c6b84b0f7dc055f1621f170	5 years ago
Flaviu Mates	815baf1a8e	TT#100954 Show device id registrations in panel UI and API ... * Modify registrations query to include dbaliases together with subscriber's username Change-Id: I898c433fd690dc207b1969c43a85b37f942f0a50	5 years ago
Flaviu Mates	2741e9ec79	TT#98650 Fix /api/subscriberregistration gateway timeout ... *Introduce pagination in redis scanning; previously all the registrations where dumped in an array and then spliced by page/rows; this was causing huge loading time for big redis DB's hence the timeout Change-Id: I1409c48b520d8d860cd8c11aea1a543286aa0334	5 years ago
Rene Krenn	186ddabb17	TT#98650 ?suppress_flush=1 parameter ... suppress executing "ul.flush" kamailio xmlrpc after "ul.add" or "ul.rm", as it seems to be another source of timeouts. Change-Id: I8faf907c4cbfd6adbe3e3645f5c32069df2eb999	5 years ago
Rene Krenn	b4281d4ee8	TT#98650 speedup redis locaction search by id ... instantiation a redis location resultset can cause a scan if no filter args are provided. Change-Id: I398398115011774c20fdecbc675223a22b9e1917	5 years ago
Flaviu Mates	1b1199e28f	TT#92002 - Add reseller_id to admins with role 'reseller' ... * The reseller_id will be present only for own admin Change-Id: I545a4e1d076a442f996b68b7d0f99167a5cbf6e9	5 years ago
Flaviu Mates	654bb1aabe	TT#92550 - Implement /api/passwordrecovery ... * The new endpoint will only accept POSTs * The request body should have two parameters called 'new_password' and 'token' * First, look for the token in redis (for admins), if not found, look for it in DB (for subscribers), if neither is found, return Change-Id: I4163a0d5bd886961317b21aeca20c8ccfdeab0dd	5 years ago
Flaviu Mates	5f20ca592d	TT#91506 - Return administrator's 'role' in /api/admins ... Change-Id: I1a3dce853bb9d79e70352b08967fb59d0032316c	5 years ago
Flaviu Mates	be14a9242e	TT#84337 - Implement /api/passwordreset ... * The new endpoint will only accept POSTs * The request body should have two parameters called 'type', 'username' and 'domain' * 'type' will accept either 'administrator', in which case only 'username' is needed, or 'subscriber', in which case 'username' and 'domain' will be needed * The regular password reset email will be sent to either the admin or the subscriber Change-Id: If1457c8c625a95295e5e93b6637927e3905698d9	5 years ago
Flaviu Mates	444a0d35b3	TT#88901 - Add GET and DELETE method for /api/admincerts ... * the GET request will show whether an admin has or has not a certificate * the DELETE request will remove an admin's certificate Change-Id: I2b233a76a4436a4d3a95749410e74aabd9fca531	5 years ago
Flaviu Mates	08291b5652	TT#85620 - Add CF mapping id to all mappings ... Change-Id: I46dc8c577abfd6e412354334227abcfdfdb0b3ad	5 years ago
Rene Krenn	65634d7014	TT#84329 encrypt/decrypt password, weppassword, pin ... Change-Id: I74ae79b798955e6e20c32a644c739d81786f90c0	5 years ago
Flaviu Mates	aec7c8921b	TT#76111 - Change LI admins flags permissions ... * Admin with lawful intercept will no longer be able to have any flags besides 'is_active', 'read_only', 'can_reset_password' * Remove reseller filter on interceptions since LI admins should see all interceptions * Add permissions to /api/admincerts and reseller ajax for LI admins Change-Id: Id912424b9bbd3ab3cbbc373ac116fda035f81fd3	5 years ago
Flaviu Mates	321b6965fb	TT#84254 - Allow patching of rewriterules on /api/rewriterulesets ... * The resource was not having the rewriterules before patching the json, because they were added only at the end in the hal resource Change-Id: I43decadb95b6cf06828969b968c61a4b87062fb6	5 years ago
Flaviu Mates	d15a6b3117	TT#83200 - Add csc_show_rtcengine_features capability ... Change-Id: Ie56ca7c074097d5fe931518bca8973a725cdc6dd	5 years ago
Guillem Jover	0a96a5d7ba	TT#83651 Move code within the try {} block ... Change-Id: I43e8dfd3375d9e22bb6ba338b2a821a8e1f1d342	5 years ago
Rene Krenn	f6a2802130	TT#83502 api: drop ringtimeout pref when deleting last CFT ... if there are no more *enabled* CFT left after editing callforwards (simple/advanced), the ringtimeout has to be removed. Change-Id: Idc450b410a3822d787f32229a06d5c1f1438e632	5 years ago
Flaviu Mates	a370111540	TT#76111 - Change Lawful Intercept admins managing ... * LI admins wil only be visible to the is_system administrator. * It's not possible for an andmin to be both ccare and LI at the same time * LI admins can only read/modify themselves * Non-system admins cannot create/read/modify LI admins Change-Id: I7b2189a87a5433d270380393d8e5ffec0283d9e5	5 years ago
Kirill Solomko	7862a87639	TT#76111 add lintercept role ... * new c.users.role 'lintercept', that set to when an admin user has enabled 'lawful_intercept' flag * only Administrator page /api/admins and /api/interceptions are available for the role * 'lintercept' role can only see own user and only change password and email Change-Id: Iadcb022a124afbd77b224e734026f380af0170e8	5 years ago
Flaviu Mates	35518554ec	Revert "TT#76111 - Hide LI Admins from NGCP Panel" ... This reverts commit ec674132df. Reason for revert: Feature was partially backported and lawful intercept admins were deleted from databse. Feature needs redesign. Change-Id: I500e66f3bd3b4a0c29fa05e1113568d3776eacf9	5 years ago
Flaviu Mates	ec674132df	TT#76111 - Hide LI Admins from NGCP Panel ... * LI Admins are no longer visible in NGCP Panel; they will be managed via config.yml; creation, deletion, email update ar all handled when adding/removing/updating a LI admin in config.yml * LI Admins can only change their password and email via Panel UI and API Change-Id: Idec849e52962b2d5c4cb2a4365cf8c90414c0431	5 years ago
Rene Krenn	5fb66c13bd	TT#82260 limit fraud interval costs to 2 fractional digits ... Change-Id: I8e5980de08e99ac167851879e43c8f9a8abd870a	5 years ago
Flaviu Mates	c8ae369e88	TT#76109 - Fix duplicate administrator email check ... Change-Id: I46d4dde50c0eb4a4bca9eca3ed0d8e4ff3dd2967	5 years ago
Rene Krenn	39bf6abf47	TT#82304 fix fraud reseller<->customer costs in mails ... Change-Id: I2c514b2a862f7e156c4a1acc4385701b83e68bc9	5 years ago
Flaviu Mates	9907936d47	TT#76108 - Implement password reset mechanism for admins ... * Introduce endopint '/resetpassword' for asking for password reset using admin username * Create form for introducing username * Create url with unique token pointing to '/recoverpassword' where admin user can introduce new password and email said url to admin's email address * Create form for setting new password * Store username and unique token in Redis expiring in 5 minutes to store password reset attempt and identify it when user accesses url in email * Limit admin access to be able to only change own password due to new password reset possibility as requested in TT#76110 Change-Id: Ie3acb961444398afa5b2fdc85e3ca8ceccf9244a	5 years ago