ngcp-panel

Commit Graph

Author	SHA1	Message	Date
Flaviu Mates	b79d68e865	TT#104760 Fix non-master admin privileges managing in API * Forbid non-master admin to change own is_master, read_only, and is_acitve flags; we have this logic in old UI already in place Change-Id: I81ab266d942e32dfb560ba488e9fd471ebc923f4	5 years ago
Flaviu Mates	1b1199e28f	TT#92002 - Add reseller_id to admins with role 'reseller' * The reseller_id will be present only for own admin Change-Id: I545a4e1d076a442f996b68b7d0f99167a5cbf6e9	5 years ago
Flaviu Mates	5f20ca592d	TT#91506 - Return administrator's 'role' in /api/admins Change-Id: I1a3dce853bb9d79e70352b08967fb59d0032316c	5 years ago
Flaviu Mates	a370111540	TT#76111 - Change Lawful Intercept admins managing * LI admins wil only be visible to the is_system administrator. * It's not possible for an andmin to be both ccare and LI at the same time * LI admins can only read/modify themselves * Non-system admins cannot create/read/modify LI admins Change-Id: I7b2189a87a5433d270380393d8e5ffec0283d9e5	6 years ago
Kirill Solomko	7862a87639	TT#76111 add lintercept role * new c.users.role 'lintercept', that set to when an admin user has enabled 'lawful_intercept' flag * only Administrator page /api/admins and /api/interceptions are available for the role * 'lintercept' role can only see own user and only change password and email Change-Id: Iadcb022a124afbd77b224e734026f380af0170e8	6 years ago
Flaviu Mates	35518554ec	Revert "TT#76111 - Hide LI Admins from NGCP Panel" This reverts commit `ec674132df`. Reason for revert: Feature was partially backported and lawful intercept admins were deleted from databse. Feature needs redesign. Change-Id: I500e66f3bd3b4a0c29fa05e1113568d3776eacf9	6 years ago
Flaviu Mates	ec674132df	TT#76111 - Hide LI Admins from NGCP Panel * LI Admins are no longer visible in NGCP Panel; they will be managed via config.yml; creation, deletion, email update ar all handled when adding/removing/updating a LI admin in config.yml * LI Admins can only change their password and email via Panel UI and API Change-Id: Idec849e52962b2d5c4cb2a4365cf8c90414c0431	6 years ago
Flaviu Mates	c8ae369e88	TT#76109 - Fix duplicate administrator email check Change-Id: I46d4dde50c0eb4a4bca9eca3ed0d8e4ff3dd2967	6 years ago
Flaviu Mates	9907936d47	TT#76108 - Implement password reset mechanism for admins * Introduce endopint '/resetpassword' for asking for password reset using admin username * Create form for introducing username * Create url with unique token pointing to '/recoverpassword' where admin user can introduce new password and email said url to admin's email address * Create form for setting new password * Store username and unique token in Redis expiring in 5 minutes to store password reset attempt and identify it when user accesses url in email * Limit admin access to be able to only change own password due to new password reset possibility as requested in TT#76110 Change-Id: Ie3acb961444398afa5b2fdc85e3ca8ceccf9244a	6 years ago
Flaviu Mates	e170193cc9	TT#81184 - Add PATCH/PUT endpoints for '/api/admins' * there is a catch when changing the admin password; first of all, according to TT#76110 only own admin users can change the password via PUT/PATCH; secondly, inside the code, for PATCH to work we need a dummy 'password' key on the old resource which has been set to the saltedpass; when updating the admin, if the password is still equal to saltedpass, no change is made to the password Change-Id: I423ebe13988c58b527db65d666f09b73a483422d	6 years ago
Andreas Granig	8f8e1d5fc9	TT#78557 - Use bcrypt to hash webpassword * Change the way webpassword is handled accross NGCP Panel UI/API to comply with new password encryption * At login, if password is not encrypted with high cost due to the ngcp-bcrypt-webpassword script, encrypt it with proper cost * Accept old password format as well until all webpasswords are encrypted Change-Id: Iefa9584a62ab4b7d2a224d10bdd415e9cbb8dfb5	6 years ago
Kirill Solomko	ce664263b2	TT#65101 add ccareadmin ccare roles * ccareadmin and ccare roles have full access to Customers, Subscribers and their preferences/settings, and read-only access to BillingProfiles,InvoceTemplates, EmailTemplates * ccare role is restricted to the related reseller Change-Id: I6cf7d3adf912f0fa98d1ef5c02abea2f4331ec4b	6 years ago
Irina Peshinskaya	b96431b909	TT#37951 Fix regression made in /api/admins Now it accepts both true/false and 0/1 Change-Id: Ifb96c896745483038b4c6a2fa0f9f4b4929e0484	8 years ago
Rene Krenn	b35b0e1cbc	TT#35662 move product_id to billing.contracts Change-Id: I5381b36e226b1c0c2032fa40c3a082b85485e4ac	8 years ago
Irina Peshinskaya	17d36cc339	TT#35429 Fix using boolean json strings in /api/admins Change-Id: If60ef0e75042c23771294315bd62513ee6d7678d	8 years ago
Irina Peshinskaya	1d9907ad45	TT#35429 Allow both 0/1 an true/false as boolean input in /api/admins Change-Id: I4c9805ebce17586674f52a9fe97f280fb9991612	8 years ago
Irina Peshinskaya	84c1bacc40	TT#28462 Rewrite admins API to Entities Change-Id: I3bf47038bfb48c09f95030eed5d83550e392ff0c	8 years ago
Gerhard Jungwirth	24de4232e6	TT#30507 remove DataHal workaround layer (NGCP::Panel was loaded every time this was used) Change-Id: I62861e0756aaaf548c9be42b4842e9a06127119c	8 years ago
Irina Peshinskaya	d7c6689b93	TT#22496 TT#22495 Disable "sipwise" admin edit and delete Change-Id: I33341247220c389f997ca02104ccfa6028e76ebb	8 years ago
Andreas Granig	0d3bf6b1ce	TT#22827 Implement form factory This patch reuses existing forms by clearing them, rather than re-instantiating them again and again. Also, panel start time should be better due to less package pre-loading. Change-Id: Ia3e64fd4b4084bb5ec35a669c5840c9fc3c58f2e	8 years ago
Andreas Granig	a52558b411	TT#22422 Implement capabilities endpoint Used to fetch whether pbx, faxserver, rtcengine etc is enabled. * Fix rtcengine reseller creation: - Refuse to create reseller if rtcengine part fails - Use proper auto-generated rtcengine values (pass, domain) to not fail on reseller names which are not forming valid hostnames. * Implement /api/admins/id to support testing - add test - fix creating admins with overly long login - fix various ACL bugs handling /api/admins/ - fix creating /api/admincerts/ as r/o user * Fix test framework - use proper client cert when switching API user Change-Id: I602fdd8181c0b3f23e76e3eab0df90a1ff9e986f (cherry picked from commit 0d376bd8b59db65296090d26f2c84d704129beef)	8 years ago
Andreas Granig	8ad683d5ae	TT#12601 Move admin pass to bcrypt and drop cert For the migration of the admin pwd, the logic is as follows: 1. If the admin has a bcrypt password already, use this 2. If not, perform auth via md5, then clear the md5 column and write a salted bcrypt hash instead. For dropping the ssl client cert, we simply not store anymore the client certificate in the DB. As a result, you cannot download the certs (pem, p12) after creation anymore, so we immediately download the two certs in a zip file after creation. A cost of 13 takes 500ms on an i7-5500U CPU @ 2.40GHz, which seems to be a reasonable value. Change-Id: I1ce21321c58d8c57d7ddce1541995f64821b0053	9 years ago
Irina Peshinskaya	2073b9e760	TT#9309 Introduce local version of the Data::HAL::Link Change-Id: Ifdf95cef32f0d118330c20316ed447e00c6dae3c	9 years ago
Irina Peshinskaya	41f32401a7	TT#9309 Introduce local version of the Data::HAL with default forcearray Change-Id: Ie33396a75fc6d27fd28fe8f7717caba0a476c776	9 years ago
Gerhard Jungwirth	b34a7df2e1	MT#21193 use Sipwise::Base in api modules which implies, among others, strict and warnings. these should never be omitted and are one of the most frequent complaints of perlcritic currently. as a result TryCatch can be removed (imported by Sipwise::Base). also, "no Moose" is removed (has no effect). Change-Id: I901b6a9f0f6d426f62b73e68f2c5ad6365c1eeef	10 years ago
Guillem Jover	0632585eba	MT#18443 Use parent instead of base module Switch from the discouraged base module to the light-weight parent module. Also remove some surrounding BEGIN blocks from 'use parent' which are completely unnecessary. Change-Id: I3a669e8024f098819be45030ca9d1afa8756105c	10 years ago
Gerhard Jungwirth	bb03c1ff46	MT#17173 fix item filtering in API item_rs from API.pm was not executed before Change-Id: I803f5680d174820db9497d4f7cc1902bfa54a9ab	10 years ago
Irina Peshinskaya	0272c297b8	MT#17173 Remove Moose Roles from API Conflicts: lib/NGCP/Panel/Controller/API/MetaConfigDefs.pm lib/NGCP/Panel/Controller/API/Root.pm Change-Id: I25597baebbec6e2436b15776da17bd6d1bfef838	10 years ago
Andreas Granig	e0f80027b1	MT#17641 Add admins resource to api Currently I only need to fetch a collection and create a new item within the collection, no need for update/delete an existing one. Thus, no AdminsItem.pm yet. Since we're exposing field names now, rename md5pass to password. Change-Id: I571a340f89560bc456147b0ec27d3ae737e6dbc3	10 years ago

29 Commits (5c5047a07039c29dc932359df88d72495dad19f5)