721 Commits (35518554ec2ab5eca8d2261b2073a0af75836c07)

Author	SHA1	Message	Date
Flaviu Mates	35518554ec	Revert "TT#76111 - Hide LI Admins from NGCP Panel" ... This reverts commit ec674132df. Reason for revert: Feature was partially backported and lawful intercept admins were deleted from databse. Feature needs redesign. Change-Id: I500e66f3bd3b4a0c29fa05e1113568d3776eacf9	6 years ago
Flaviu Mates	ec674132df	TT#76111 - Hide LI Admins from NGCP Panel ... * LI Admins are no longer visible in NGCP Panel; they will be managed via config.yml; creation, deletion, email update ar all handled when adding/removing/updating a LI admin in config.yml * LI Admins can only change their password and email via Panel UI and API Change-Id: Idec849e52962b2d5c4cb2a4365cf8c90414c0431	6 years ago
Rene Krenn	5fb66c13bd	TT#82260 limit fraud interval costs to 2 fractional digits ... Change-Id: I8e5980de08e99ac167851879e43c8f9a8abd870a	6 years ago
Flaviu Mates	c8ae369e88	TT#76109 - Fix duplicate administrator email check ... Change-Id: I46d4dde50c0eb4a4bca9eca3ed0d8e4ff3dd2967	6 years ago
Rene Krenn	39bf6abf47	TT#82304 fix fraud reseller<->customer costs in mails ... Change-Id: I2c514b2a862f7e156c4a1acc4385701b83e68bc9	6 years ago
Flaviu Mates	9907936d47	TT#76108 - Implement password reset mechanism for admins ... * Introduce endopint '/resetpassword' for asking for password reset using admin username * Create form for introducing username * Create url with unique token pointing to '/recoverpassword' where admin user can introduce new password and email said url to admin's email address * Create form for setting new password * Store username and unique token in Redis expiring in 5 minutes to store password reset attempt and identify it when user accesses url in email * Limit admin access to be able to only change own password due to new password reset possibility as requested in TT#76110 Change-Id: Ie3acb961444398afa5b2fdc85e3ca8ceccf9244a	6 years ago
Flaviu Mates	e170193cc9	TT#81184 - Add PATCH/PUT endpoints for '/api/admins' ... * there is a catch when changing the admin password; first of all, according to TT#76110 only own admin users can change the password via PUT/PATCH; secondly, inside the code, for PATCH to work we need a dummy 'password' key on the old resource which has been set to the saltedpass; when updating the admin, if the password is still equal to saltedpass, no change is made to the password Change-Id: I423ebe13988c58b527db65d666f09b73a483422d	6 years ago
Flaviu Mates	10415a55f6	TT#74220 - Upgrade '/api/cfmappings' ... * Introduce posibility to provision source sets, time sets, b number sets and destination sets in the same request with defining cf mappings which include advanced cf setting with multiple cf rules. Change-Id: I9d2865c3fbdac0651a287b926a3fb0e190fca814	6 years ago
Flaviu Mates	251b95e521	TT#74220 - Return condition values on /api/headerrulesets GET ... Change-Id: I663d4768dd1b4e28e5799ad246625ad717739d8c	6 years ago
Andreas Granig	8f8e1d5fc9	TT#78557 - Use bcrypt to hash webpassword ... * Change the way webpassword is handled accross NGCP Panel UI/API to comply with new password encryption * At login, if password is not encrypted with high cost due to the ngcp-bcrypt-webpassword script, encrypt it with proper cost * Accept old password format as well until all webpasswords are encrypted Change-Id: Iefa9584a62ab4b7d2a224d10bdd415e9cbb8dfb5	6 years ago
Rene Krenn	a30a36012c	TT#80552 fix /api/calllist owner logic ... Change-Id: I58041f219e80c8bfb7108789bbd489f409cf39bc	6 years ago
Rene Krenn	f5459af67e	TT#78467 OWNER_VAT_SETTINGS option for calllist/conversations ... OWNER_VAT_SETTINGS = 1: apply the callist "owner's" VAT settings (VAT rate and Add VAT Y/N) for each CDR displayed. OWNER_VAT_SETTINGS = 0: apply the CDR's source/destination account's VAT settings for each CDR individually. Change-Id: I08cc88afeb0a0c7cc5592b9542dc9da25bb86286	6 years ago
Rene Krenn	a11f2bed5e	TT#77452 properly synchronize subscriber create/update ... acquire the billing.contract row lock *before* any unordered billing.voip_numbers rowlocks by sub manage_subscriber_numbers(). - "deadlock" waittimeout errors will cease when creating subscribers concurrently via api - max_subscribers, is_pilot and other per-contract constraints will be respected accurately Change-Id: I73bb7525b327bbb09217b790be9c14cc65ddebcc	6 years ago
Flaviu Mates	445197df53	TT#76360 - Implement /api/activesubscriberpreferences endpoint ... * A new endpoint is now available that will return subscriber's preferences and also the preferences that the subscriber inherits from its domain Change-Id: Iaa29fbe57d520f79ac7051dc8fd151d26df41384	6 years ago
Rene Krenn	adabbf084b	TT#78153 fix _item_by_aor for redis ... - prevent unneccesary redis "scan"s - avoid filter/scan (iterating all registrations) by properly un-aliasing filednames - ignore any registration of subs that no longer exists - apply the fixes for ->search(), but also ->find() Change-Id: I32c89482fc06e76b0369034cd8f3eda24ebbe1bf	6 years ago
Flaviu Mates	a51a7560bc	TT#76751 - Fix CF creation when not sending 'enabled' param ... * Default to 1 if no 'enabled' param is sent * Send mapping's 'enabled' value to UI Form to stop defaulting to 1 when trying to edit Change-Id: Iec22f878bd87999c85a0cc99eabcda68fd7f2985	6 years ago
Flaviu Mates	d0926cf6e6	TT#74526 - Updgrade /api/headerrules ... * Introduce posibility to provision header rules, conditions and actions at the same time using only the /api/headerrules endpoint; also rules can be modified with PUT/PATCH on /api/headerrules Change-Id: I5ef9a85b4bf0f28693d22603cc74f269ea483983	6 years ago
Flaviu Mates	727af5dd56	TT#74527 - Upgrade /api/callforwards ... * Introduce posibility to provision source sets, time sets, b number sets and destination sets in the same request with defining call forwards. Change-Id: I8dd426bcf50a605e257af5e62ca404884bfe9c0d	6 years ago
Flaviu Mates	1e7762e0b7	TT#74525 - Updgrade /api/headerrulesets ... * Introduce posibility to provision rule sets, rules, condition and actions at the same time using only the /api/headerrulesets endpoint; also rules can be modified with PUT/PATCH on /api/headerrulesets Change-Id: I8c054f72a2632d45fec76166774521f8c22aea05	6 years ago
Flaviu Mates	8a7b6f7314	TT#75751 - Add enable/disable feature for Call Forwards ... * Implement possibility to enable and disable call forward rules in both UI and API Change-Id: I8237a0695c5039b2edb4734003bb2a859bb8ee37	6 years ago
Guillem Jover	467084705d	TT#71950 Fix typos ... Warned-by: codespell Change-Id: If7e52bf2fbf013586e802e5ebb77a272599d9c38	6 years ago
Rene Krenn	bfd2b4b5b1	TT#73364 batch provisioning ... implementation of config.yml-based "provisioning templates" for creating a subscriber setup with one click or batch-wise (.csv upload), currently comprising of: - contact - contract - contract prefs - subscriber - subscriber prefs - trusted sources - registrations Change-Id: I0c3c1ef93bbe0ca926bbe906a35346bef5094fac	6 years ago
Flaviu Mates	b0baf125c7	TT#69407 - Add customer external_id to /api/customerbalances ... Change-Id: I0d80b235e1e643904ed63d62a6b7333f23151b23	6 years ago
Flaviu Mates	467321e2f3	TT#69360 - Fix 500 errors when issuing POST to HeaderRule(Actions|Conditions) ... * DBIx could not resolve the relation 'rwr_set' when post processing hal resource because, if not 'rwr_set_id', parameter is sent, the field is not set in the DB * Add error message when sending 'rwr_dp' param with no 'rwr_set_id' which was causing error as well Change-Id: I90c2d5314b9e8a5389cc606bb0be72533614f8d5	6 years ago
Flaviu Mates	a4265a91e0	TT#69503 - Change subscriber's domain assignation logic ... * Only allow to assign domains for subscribers from the same reseller as subscriber's customer * Change Subscribers.yaml test to retrieve a domain for testing from the same reseller as subscriber's customer Change-Id: I6c7cc7a9874207cfcd63360a6f87e2fd6841011c	6 years ago
Flaviu Mates	54935452e8	TT#69370 - Remove validation of SIP URI type for banned users id's ... * Removed restriction that would cause an error when trying to get/delete a bannedusers entry that had a different format than 'user@domain.com' Change-Id: Ie3a5fa80b888d97bf4a34a8ad9a65514699ef77e	6 years ago
Flaviu Mates	16d34fa282	TT#69304 - Fix typo that broke '/api/speeddials' ... * Change 'role' to 'roles' to correctly fetch user role Change-Id: Ib24ad70ff9cebae1a64ade7fa4fd32516c2cc972	6 years ago
Rene Krenn	838cd09aca	TT#68703 workaround slow contract_cnt queries of profiles ... Change-Id: Ieedb868b268890ebf16e6f036ef68601e73f3bcd	6 years ago
Flaviu Mates	5c1fa4074d	TT#64663 - Add received field to subscriberregistrations ... * Added 'received' field in subscriberregistrations form. Also if it's present in the 'path' field, it is now fetched from there. Change-Id: I187ea2a0494b067088e08243488321cb0140ea61	6 years ago
Andreas Granig	be9f360638	TT#67210 More db table column alignments ... Change-Id: Ifb10456000232628e55ed9e33ae873ea6a332fb7	6 years ago
Andreas Granig	4ea66d6177	TT#67210 Align deviceid alias name to db column ... Change-Id: I98bb49b55cce0ade5994fa18c23a2ece4951e42a	6 years ago
Andreas Granig	800957e900	TT#67210 Use device_id assignment for field devices ... * If a device id is assigned to a field device line, populate the device_id field for this line to be used in config templates. * Handle assigned alias id of deviceid_number_id in /api/pbxdevices, if any. Change-Id: I455c4cb6e7d96a21977094e9af97ae91bd29fb92	6 years ago
Marco Capetta	5b39645647	TT#62269 add new call forward type "cfo" ... * "cfo" is for Call Forward Rerouting * "cfo" was not added into the "Secretary Manager" part Change-Id: I3c9eed1329ef93a1e643ace5f7b8c2db172f406d	6 years ago
Flaviu Mates	42473db9d7	TT#64751 - Allow subscribers to change their password ... * Add specific check for non-pbx subscriberadmins Change-Id: I133d1f77fac54ef77182661f3d8eeee71768a4e3	7 years ago
Kirill Solomko	ce664263b2	TT#65101 add ccareadmin ccare roles ... * ccareadmin and ccare roles have full access to Customers, Subscribers and their preferences/settings, and read-only access to BillingProfiles,InvoceTemplates, EmailTemplates * ccare role is restricted to the related reseller Change-Id: I6cf7d3adf912f0fa98d1ef5c02abea2f4331ec4b	7 years ago
Flaviu Mates	6f8a1c8be0	TT#64751 - Allow subscribers to change their password ... * Change permissions to allow subscribers to change their own password Change-Id: Ieee9d1b3d16cab6ce0313491b4d65574039034f3	7 years ago
Andreas Granig	536935f754	TT#64653 Add thumbnail support to admin panel ... Change-Id: Ibf4a09ad8ad0d67fc2264891c80a71b9f86536f8	7 years ago
Kirill Solomko	8c69fbf604	TT#64017 API/SubscriberRegistrations Redis multidomain search ... * make search by domain strict when redis usrloc is enabled and multidomain=1 to omit entries without domain and vice versa, omit entries with domain when multidomain=0 Change-Id: Ia64c87596ea02b9e5dcc9789751a639ef0c6a0b7	7 years ago
Rene Krenn	ed3ea31e07	TT#64701 remove customer_fraud_events.pm virtualview ... Change-Id: I09b3c36945e9234aec330066ae8cb29cb8ccb831	7 years ago
Kirill Solomko	914722e348	TT#63545 rework /api/customerfraudevents support cdr_period_costs ... * /api/customerfraudevents now support cdr_period_costs * add PATCH support to be able to change notify_status and notified_at * item id is now compound from contract_id,period,period_date * now all locked contracts are returned (was only for current day/month before) * interval query param is not mandatory anymore and multiple entries per contract can be returned Change-Id: I9faa911d260f3e3cd386fb1470663a82edb2850c	7 years ago
Flaviu Mates	430e59055c	TT#64011 - Implement NCOS LNP Carrier patterns support in UI/API ... * Create page for Lnp Carrier Patterns in Panel UI * Add create/edit/delete functionalities for Lnp Carrier Patterns * Create API enpoints for Lnp Carrier Patterns Change-Id: I7e98b330128bf5423382a109fd316e5331f985bd	7 years ago
Kirill Solomko	4db31270b2	TT#63542 API/SubscriberRegistrations respect redis usrloc ... * _item_by_aor search now includes redis usrloc state as well as ignore_auth_realm (multidomain) to build correct search queries in both redis and db locations Change-Id: I5c08a299c88592c63f3778dd0cf384a56cde3316	7 years ago
Kirill Solomko	09a10344fd	TT#63542 use multidomain in item_by_aor ... * multidomain (ignore_auth_realm) is used to either use NULL or the domain Change-Id: I7a2ad4fda2d578c10825b96bdbf999f3d5e6963d	7 years ago
Flaviu Mates	603351c2d5	TT#59024 - Disable web_password and sip password fields ... for administrators with disabled 'show_passwords' * Add check in master data edit form to disable web_password and sip password fields. * Add check for api GET to not show passwords Change-Id: Icf95cddc07982a698c893661b529e7542002ec60	7 years ago
Rene Krenn	6d89e74253	TT#59803 obfuscate .*password.* fields in request+response body (json) ... Change-Id: I9f457b8cd9b0ff2e94c5795fb9987f97af5ac1f9	7 years ago
Kirill Solomko	9094ec496e	TT#60502 refactor PATCH by value ARRAY ... * PATCH by value when it is an ARRAY now iterates backwards through the current values and it iterates as: for current_values for values_to_remove instead of: for values_to_remove for current_values to preserve indexes order * check and avoid situations when indexes for removal are added multiple times, by marking already added indeses for removal Change-Id: Id50c5ea08ad0f7c626a6b23b288e6d008a19696a	7 years ago
Kirill Solomko	ffdb2d0010	TT#60502 fix PATCH removal by value when multiple elements are removed ... * elements must be removed reversed so last index is removed first, otherwise the list "for removal" becomes out of sync with the "current elements" causing wrong values to be removed, or an out of bounds index array error Change-Id: I9ab9bce8205169bc7841c51f37743ab17946cc11	7 years ago
Rene Krenn	b0465b9f07	TT#59803 obfuscate logged request+response body to protect passwords ... Change-Id: I18003de5a24e39b64cf340ec0d4b758a1a223af9	7 years ago
Rene Krenn	dda5ffe48f	TT#56340 fix subscribers.t not matching obfuscation chars ... Change-Id: I7023d1e23fc397e3556705fc52db50eace6c02b4	7 years ago
Rene Krenn	cae5270af5	TT#56340 panel logline obfuscation ... adds gdpr obfuscation quoting for: + subscriber numbers + subscriber ip addresses + subscriber usernames + any logmessage "DATA": query parameters, form data, response data + subscriber uuid's + call id's + callforward sip uri's the quoting is centralized by $c->qs() ("quote sensitive"), using catalyst plugin mechanism. escape symbols are set to « (\x{ab}) and » (\x{bb}). generate_logfile_data_inventory.pl was modified to mark loglines with "gdpr affected" status, if $c->qs() was used in a log message. Change-Id: I0f42d7992594232ae33e5666b0a64009211c5b76	7 years ago