ngcp-panel

Commit Graph

Author	SHA1	Message	Date
Kirill Solomko	cc10506b2e	TT#129162 fix subscriber webpassword field validation * 'webpassword' field is now also validated for invalid (non-ascii) characters * Fix multiple APP input field validation erros to comma joined. * Adjust 'webpassword' field validation errors to have better readability when there are multiple validation errors Change-Id: I21536f97a4da78cc5192a3abd8cd5adef1b819ec	5 years ago
Kirill Solomko	2b144caf2c	TT#128605 implement dynamic fields expand * add API functionality to request additional data and expand fields in GET methods * syntax: - /api/resource/?expand=all - expands all expandable fields e.g.: customer_id field is expanded and customer internally is queried and returned under "customer" => {...} (the returned data is identical to what /api/customers/id would return) - /api/resource/?expand=reseller_id,customer_id - expands only reseller_id and customer_id fields, if they are expandable - /api/resource/?expand=reseller_id,invalidfield_id - returns the data and expands only fields that are expandable (reseller_id in this case) but if it finds either unknown fields or non-expandable fields, changes HTTP status code to "409 Conflict" * adapt all API endpoints to support dynamic expand fields expanding functionality, however the actual expand for them requires modifying the form fields in the following format: has_field 'contact_id' => ( element_attr => { expand => { class => 'NGCP::Panel::Role::API::CustomerContacts', id_field => 'contact_id', alias => 'contact', fetch => 0, }, }, ); - class - represents the class that should be used by the logic to fetch the relevant data - id_field - which field from the resource needs to be expanded, it should be the "id" field (subscriber_id, domain_id, etc.) - alias - (optional), under which key the fetched data is stored. the field name is used as the key if the option is omitted. - fetch - (optional), if the returned data is under $data->{contract_id} then it will be fetched from there and stored under the key (field name or alias), otherwise the whole retreived data is stored under the key (field name or alias) * adapt /api/autoattendants to use the new approach (old one was expand=1) * currently supported endpoints with expand: - admins - autoattendants - domains - customers - customercontacts - resellers - subscribers Change-Id: Iac53409dad944ed4794039a48dc3a9f6dce25bc1	5 years ago
Flaviu Mates	aec7c8921b	TT#76111 - Change LI admins flags permissions * Admin with lawful intercept will no longer be able to have any flags besides 'is_active', 'read_only', 'can_reset_password' * Remove reseller filter on interceptions since LI admins should see all interceptions * Add permissions to /api/admincerts and reseller ajax for LI admins Change-Id: Id912424b9bbd3ab3cbbc373ac116fda035f81fd3	6 years ago
Flaviu Mates	a370111540	TT#76111 - Change Lawful Intercept admins managing * LI admins wil only be visible to the is_system administrator. * It's not possible for an andmin to be both ccare and LI at the same time * LI admins can only read/modify themselves * Non-system admins cannot create/read/modify LI admins Change-Id: I7b2189a87a5433d270380393d8e5ffec0283d9e5	6 years ago
Kirill Solomko	7862a87639	TT#76111 add lintercept role * new c.users.role 'lintercept', that set to when an admin user has enabled 'lawful_intercept' flag * only Administrator page /api/admins and /api/interceptions are available for the role * 'lintercept' role can only see own user and only change password and email Change-Id: Iadcb022a124afbd77b224e734026f380af0170e8	6 years ago
Flaviu Mates	35518554ec	Revert "TT#76111 - Hide LI Admins from NGCP Panel" This reverts commit `ec674132df`. Reason for revert: Feature was partially backported and lawful intercept admins were deleted from databse. Feature needs redesign. Change-Id: I500e66f3bd3b4a0c29fa05e1113568d3776eacf9	6 years ago
Flaviu Mates	ec674132df	TT#76111 - Hide LI Admins from NGCP Panel * LI Admins are no longer visible in NGCP Panel; they will be managed via config.yml; creation, deletion, email update ar all handled when adding/removing/updating a LI admin in config.yml * LI Admins can only change their password and email via Panel UI and API Change-Id: Idec849e52962b2d5c4cb2a4365cf8c90414c0431	6 years ago
Flaviu Mates	9907936d47	TT#76108 - Implement password reset mechanism for admins * Introduce endopint '/resetpassword' for asking for password reset using admin username * Create form for introducing username * Create url with unique token pointing to '/recoverpassword' where admin user can introduce new password and email said url to admin's email address * Create form for setting new password * Store username and unique token in Redis expiring in 5 minutes to store password reset attempt and identify it when user accesses url in email * Limit admin access to be able to only change own password due to new password reset possibility as requested in TT#76110 Change-Id: Ie3acb961444398afa5b2fdc85e3ca8ceccf9244a	6 years ago
Andreas Granig	8f8e1d5fc9	TT#78557 - Use bcrypt to hash webpassword * Change the way webpassword is handled accross NGCP Panel UI/API to comply with new password encryption * At login, if password is not encrypted with high cost due to the ngcp-bcrypt-webpassword script, encrypt it with proper cost * Accept old password format as well until all webpasswords are encrypted Change-Id: Iefa9584a62ab4b7d2a224d10bdd415e9cbb8dfb5	6 years ago
Kirill Solomko	ce664263b2	TT#65101 add ccareadmin ccare roles * ccareadmin and ccare roles have full access to Customers, Subscribers and their preferences/settings, and read-only access to BillingProfiles,InvoceTemplates, EmailTemplates * ccare role is restricted to the related reseller Change-Id: I6cf7d3adf912f0fa98d1ef5c02abea2f4331ec4b	6 years ago
Irina Peshinskaya	d7c6689b93	TT#22496 TT#22495 Disable "sipwise" admin edit and delete Change-Id: I33341247220c389f997ca02104ccfa6028e76ebb	8 years ago
Andreas Granig	a52558b411	TT#22422 Implement capabilities endpoint Used to fetch whether pbx, faxserver, rtcengine etc is enabled. * Fix rtcengine reseller creation: - Refuse to create reseller if rtcengine part fails - Use proper auto-generated rtcengine values (pass, domain) to not fail on reseller names which are not forming valid hostnames. * Implement /api/admins/id to support testing - add test - fix creating admins with overly long login - fix various ACL bugs handling /api/admins/ - fix creating /api/admincerts/ as r/o user * Fix test framework - use proper client cert when switching API user Change-Id: I602fdd8181c0b3f23e76e3eab0df90a1ff9e986f (cherry picked from commit 0d376bd8b59db65296090d26f2c84d704129beef)	8 years ago
Andreas Granig	b60b439220	TT#13249 Implement API to create admin client cert Admins can use this to generate a new ssl client certificate package in ZIP format containing a PEM and a P12 cert, the same way you can do it on the admin panel. Admins can generate that for themselves in all cases, or for others if they are master or superuser. If role is reseller, then masters can only do this within their own reseller. Change-Id: I32d5c1b5af5324d1c80b34bacecd7f2665cd91c7	9 years ago
Andreas Granig	8ad683d5ae	TT#12601 Move admin pass to bcrypt and drop cert For the migration of the admin pwd, the logic is as follows: 1. If the admin has a bcrypt password already, use this 2. If not, perform auth via md5, then clear the md5 column and write a salted bcrypt hash instead. For dropping the ssl client cert, we simply not store anymore the client certificate in the DB. As a result, you cannot download the certs (pem, p12) after creation anymore, so we immediately download the two certs in a zip file after creation. A cost of 13 takes 500ms on an i7-5500U CPU @ 2.40GHz, which seems to be a reasonable value. Change-Id: I1ce21321c58d8c57d7ddce1541995f64821b0053	9 years ago
Guillem Jover	a6d859ca8f	MT#21193 Remove unused dependencies and imports The codebase does not use autodie directly, it does indirectly via Sipwise::Base, and the autodie module is part of the standard perl distribution anyway. TryCatch is imported via Sipwise::Base, and that depends on it. The rest are not used anymore in the codebase. Change-Id: Ic08e246cc60d7d151381dff39e0eba517a492e06	10 years ago
Andreas Granig	e0f80027b1	MT#17641 Add admins resource to api Currently I only need to fetch a collection and create a new item within the collection, no need for update/delete an existing one. Thus, no AdminsItem.pm yet. Since we're exposing field names now, rename md5pass to password. Change-Id: I571a340f89560bc456147b0ec27d3ae737e6dbc3	10 years ago
Andreas Granig	04a64e1493	MT#16465 partly remove namespace::sweep and others Remove namespace::sweep Remove MooseX stuff Remove perl5i Remove Moose where possible Change-Id: I4f873afb466f4e58a04c3304ff74df2185470b03	10 years ago
Andreas Granig	4227fd2522	MT#13201 Enhance voucher API. - Use billing_data ACL grants to modify vouchers - Use encryption in UI for voucher code Change-Id: I7711a43db8596d5f733d6c52d2f6608f434b2463	11 years ago
Andreas Granig	2bf4fe1e92	MT#6831 Implement global password policy.	12 years ago
Gerhard Jungwirth	35c5ef8fe7	MT#6695 separate api/server certfile	12 years ago
Andreas Granig	d508a519c8	MT#3933 API: tighten subscriber creation.	12 years ago
Andreas Granig	329b831918	MT#5199 Offer API CA Cert for download too.	12 years ago
Andreas Granig	883cd9a8b3	MT#5199 Store client cert in DB and offer P12 fmt. For browser imports, you need a PKCS12 format, so offer the cert in that format for download also.	12 years ago
Lars Dieckow	aba646f59b	MT#3929 certificate management	12 years ago
Andreas Granig	45334bbd42	Fix administrator creation/editing. Properly handle on-the-fly reseller creation. Remove unnecessary id from forms.	13 years ago
Andreas Granig	d9ff6d5555	Enforce minimum password lengths.	13 years ago
Andreas Granig	4b3d1caab6	Streamline forms in regards to submitid.	13 years ago
Andreas Granig	bfda0821fc	Harden and enhance admin handling. Move admin forms to own subfolder and split into reseller and admin form. Migrate DT handling to Utils function. Allow resellers to create admins within their own reseller. Make sure to not lock out an admin when editing own admin. Deny write access to admins for non-master admins.	13 years ago

28 Commits (8516d817c60928f13c9fb8ec2dba9ffe0f7e63f7)