201 Commits (ace1698a3d54610781e7502330f537fa056631c0)

Author	SHA1	Message	Date
Oleksandr Duts	ace1698a3d	TT#154550 API topuplogs - expand fields ... * The next fields are expanded: package_after_id, package_before_id, profile_after_id, profile_before_id, contract_id, contract_balance_after_id, contract_balance_before_id, subscriber_idvoucher_id. Change-Id: I4d5f12fb88eaaeb8daf45e673c14e92c1512e239	3 years ago
Rene Krenn	599dd0613b	TT#151751 fix plaintext sippassword no longer returned ... this fix addresses regression reported by dominik: * $resource{_password}/{_webpassword} cannot be set before the form validation as they are effectively removed by it, causing /api/susbcribers returning no passwords at all for 'subscriber' roles * Having them after the patch makes no sense either as next resource_from_item call will effectively remove them again (in PATCH) (cherry picked from commit 5e9066c4fb) Change-Id: I88c9ec40843f1e9a6983952b96c0b0e70fbb1bb1	3 years ago
Kirill Solomko	5d9618e642	TT#156354 fix a syntax typo when marking voicemail as read ... Change-Id: Ib13a1839e6f5bc9419fb137a2e6d4a23d6993ecd	3 years ago
Kirill Solomko	81ebdb8dcf	Revert "TT#151751 refactor persisting subscriber webpassword" ... This reverts commit 5e9066c4fb. This implementation breaks: * $resource{_password}/{_webpassword} cannot be set before the form validation as they are effectively removed by it, causing /api/susbcribers returning no passwords at all for 'subscriber' roles * Having them after the patch makes no sense either as next resource_from_item call will effectively remove them again (in PATCH) Change-Id: I0e8389e8ab34ad72f1b87a684daba77f1030f8ba	3 years ago
Rene Krenn	5e9066c4fb	TT#151751 refactor persisting subscriber webpassword ... a multitude of issues popped after introducing bcrypted webpasswords in the database. most recently the PATCH /api/susbcribers rail was reported to reset the webpassword unintentionally. subscriber login fails afterwards, which is a severe issue. the bugs are adressed by this refactorings. the change also introduces a global variable $NGCP::Panel::Utils::Auth::ENCRYPT_SUBSCRIBER_WEBPASSWORDS to control encrypting webpasswords. it is still enabled as of now, but it's worth to consider disabling it. there other ways to have a "cost" for an authentication request, eg. adding a simple sleep(1sec). Change-Id: I2d47d54a2d83568546ffdd2b211337a5f56be3a2	3 years ago
Rene Krenn	4c47920f2e	TT#132650 run provisioningtemplate from api ... provisioning templates with their dynamic forms can be executed by a entityitem POST request, ie. POST /api/provicioningtemplates/<reseller>/<template> or POST /api/provisioningtemplates/<readonly template> Change-Id: I77f6c9d42e1afdb49635d3f11e4d73bcf6269605	4 years ago
Kirill Solomko	b199ad3e1e	TT#139550 improve vmnotify behaviour ... * vmnotify() now accepts cli and uuid arguments * API handling of voicemails is now improved to: - send a notify if the item's INBOX/Old has been changed - correctly process DELETE to send vmnotify after the item's removal Change-Id: Ic00ae825cf091bce273e55aa37cd0a7ac80d8b0f	4 years ago
Kirill Solomko	67bc755276	TT#139550 vmnotify use correct uuid ... * wrong value was used in the vmnotify select query, now the correct uuid is used Change-Id: I311cc7ea9cce01014dd40761d0bc7f594ecca7b2	4 years ago
Kirill Solomko	68dcad8c70	TT#139550 improve vmnotify messaging ... * improve select from voicemail_spool to avoid sequental scan with like '%..' * select now fetches all messages count * add old messages count support * old/new messages are reported as 0 if not returned from voicemail_spool Change-Id: I11ac1a407e8d22fe828a17cda55aa3298c6e6f02	4 years ago
Kirill Solomko	4e33039bb6	TT#145300 fix domain vs customer reseller check ... * fix a wrong expression that checks domain vs customer reseller id Change-Id: I0da43bffa833ce5432848c23aacf307bc1b0a3ff	4 years ago
Kirill Solomko	da4278daa3	TT#145300 Adjust domains reseller_id handling ... * domains do not use billing.domain_resellers table anymore but instead the new domains.reseller_id field. That is to remove the unneeded many<>many relation through the additional table where the actual logic only supports one(reseller) to many(domains) relation Change-Id: I1b681543baf1901f19e10c2f6210e4cf6eeb8fbe	4 years ago
Kirill Solomko	471b9fe861	TT#139550 fix ngcp-vmnotify system call to use the correct args ... * uuid arg is mandatory now and it is added to the ngcp-vmnotify invokation Change-Id: Ie36b06d7abf700fe65a965c0ea8dbe813dc4faa2	4 years ago
Donat Zenichev	df30292c6b	TT#66577 Add support of outbound registrations for SIP peerings ... We need to add an improvement, which fulfills the work of the registration mechanism for SIP peerings. Not only do we add here a registration tirggering for peerings, but also a 'type' is introduced, which is mostly needed for XMLRPC commands being sent towards SEMS, to let it understand to whom the $sid is related to. Plus a list of improvements: - de-register peering host on deletion ; - de-register peering host on disable / register of peering host on enable ; Change-Id: I035dfadf6709acb4d106a70f6124f024e719044f	4 years ago
Kirill Solomko	c50b49db96	TT#133800 fix password fields behaviour in API ... * PATCH: password fields are not removed when resource is created for apply_patch(), they are removed under the same condititions later when hal is generated, that is to ensure that admin users without the 'show_passwords' flag as well as subscribers will not run into situation when they use PATCH and cannot apply it for "path": "/password" or/and "path": "/webpassword", as they were removed before apply_patch() * rework encrypted webpassword detection. webpasword is detected as encrypted if its length is 54 or 56 and it contains at least one '$' char, there is a chance for false positive detection when a user provides with a plain-text password with the same pattern but it's very unlikely, as well as since mr8.5 webpasswords are expected to be encrypted, and moreover worth case scenario is that the plain-text password will not be returned to the user Change-Id: I8ea739cbf728b2134f3ce00cee29da42ab3fb4a3	4 years ago
Flaviu Mates	fe7f65d948	TT#99700 Fix subscribers PATCH in case of admin without show_passwords ... * restore password field in prepare_resource after it was deleted in resource_from_item for admins without show_passwords flag * the password is restored only in case it's missing from resource and it's present in DB Change-Id: I390fb8fb94f4546734cb899c741dc90e439df068	4 years ago
Flaviu Mates	f4cb6933b4	TT#119550 Allow subscribers to manage their registrations ... * give access to subscribers roles to see, create and update own registrations * subscriberadmins can manage all registrations of subscribers under same customer Change-Id: I643121da901b0ed99fc718106a1632da4e1e1936	4 years ago
Rene Krenn	a916bd3c4f	TT#116703 prevent entering duplicate alias numbers ... Change-Id: I3d35f87738bb6d73f62b300e487a113b45223ad1	4 years ago
Rene Krenn	a15e3c2c84	TT#113450 prevent deleting primary alias ... Change-Id: I8809daa123353a6e1defc3dff2870b9ad3e6551d	4 years ago
Rene Krenn	aa84c19ace	TT#105100 check PATCHing unset webpasswords ... Change-Id: I18fb6b2f67afe91e080331d277ea29d781f7c7c2	4 years ago
Rene Krenn	8325f3e5c5	TT#105100 fix PATCHing unset webpasswords ... Change-Id: Ieb02d5ea4d8c1a8bee2ab94dfcf64778e79b8510	4 years ago
Kirill Solomko	6175625d9f	TT#104150 fix /api/callrecordings deletion ... Change-Id: Ib8bf01cc4a5f9632228c699aee3520da0077c7bc	4 years ago
Flaviu Mates	c50153b1f7	TT#99561 Introduce extension range preference for Customers ... * Limit subscriber's extension to a predefined customer extension range preference (both AP and api) Change-Id: I0b6ac5c24b3838f07cc561e7ee6b7cfabe69385e	4 years ago
Kirill Solomko	96ce7b1143	TT#101300 remove devid_alias field ... * dbaliases->devid_alias field is no longer in use and available via the UI/API Change-Id: I3ec1a82ef76822595aa37e94ec002d11a0cce58c	4 years ago
Flaviu Mates	8450bf33ec	TT#100751 Remove all registrations when terminating subscriber ... * Include alias numbers in registrations removal when subscriber is terminated, alongside registrations by username Change-Id: I5c913c56718e4b9f98f4677c7cd72722ee9f30d3	5 years ago
Flaviu Mates	2741e9ec79	TT#98650 Fix /api/subscriberregistration gateway timeout ... *Introduce pagination in redis scanning; previously all the registrations where dumped in an array and then spliced by page/rows; this was causing huge loading time for big redis DB's hence the timeout Change-Id: I1409c48b520d8d860cd8c11aea1a543286aa0334	5 years ago
Rene Krenn	b4281d4ee8	TT#98650 speedup redis locaction search by id ... instantiation a redis location resultset can cause a scan if no filter args are provided. Change-Id: I398398115011774c20fdecbc675223a22b9e1917	5 years ago
Flaviu Mates	d028948f1a	TT#90351 - Fix /api/subscribers PATCH ... * whenever webpassword was not PATCHed, the request would fail because the resource would have the encrypted webpassword from the DB and form valdiation would complai it's too long * the approach now is to remove the webpassword from resource before form validation if the resource has the same webpassword as the DB (i.e. webpassword wasn't (PATCHed) and then reassign it to the resource after form validation Change-Id: I86fab0f4bf789bd3518a74d49daf1a0402f20125	5 years ago
Rene Krenn	65634d7014	TT#84329 encrypt/decrypt password, weppassword, pin ... Change-Id: I74ae79b798955e6e20c32a644c739d81786f90c0	5 years ago
Andreas Granig	8f8e1d5fc9	TT#78557 - Use bcrypt to hash webpassword ... * Change the way webpassword is handled accross NGCP Panel UI/API to comply with new password encryption * At login, if password is not encrypted with high cost due to the ngcp-bcrypt-webpassword script, encrypt it with proper cost * Accept old password format as well until all webpasswords are encrypted Change-Id: Iefa9584a62ab4b7d2a224d10bdd415e9cbb8dfb5	5 years ago
Rene Krenn	a11f2bed5e	TT#77452 properly synchronize subscriber create/update ... acquire the billing.contract row lock *before* any unordered billing.voip_numbers rowlocks by sub manage_subscriber_numbers(). - "deadlock" waittimeout errors will cease when creating subscribers concurrently via api - max_subscribers, is_pilot and other per-contract constraints will be respected accurately Change-Id: I73bb7525b327bbb09217b790be9c14cc65ddebcc	5 years ago
Rene Krenn	adabbf084b	TT#78153 fix _item_by_aor for redis ... - prevent unneccesary redis "scan"s - avoid filter/scan (iterating all registrations) by properly un-aliasing filednames - ignore any registration of subs that no longer exists - apply the fixes for ->search(), but also ->find() Change-Id: I32c89482fc06e76b0369034cd8f3eda24ebbe1bf	5 years ago
Rene Krenn	bfd2b4b5b1	TT#73364 batch provisioning ... implementation of config.yml-based "provisioning templates" for creating a subscriber setup with one click or batch-wise (.csv upload), currently comprising of: - contact - contract - contract prefs - subscriber - subscriber prefs - trusted sources - registrations Change-Id: I0c3c1ef93bbe0ca926bbe906a35346bef5094fac	5 years ago
Flaviu Mates	ea1e40b8f5	TT#73550 - Fix deletion of allowed_cli when patching alias_numbers ... * Only reconstruct allowed_clis from alias_numbers without deleting custom introduced clis Change-Id: Ib18808d2bc5c37e1eb76b005bc43f71fe121215f	5 years ago
Kirill Solomko	ce664263b2	TT#65101 add ccareadmin ccare roles ... * ccareadmin and ccare roles have full access to Customers, Subscribers and their preferences/settings, and read-only access to BillingProfiles,InvoceTemplates, EmailTemplates * ccare role is restricted to the related reseller Change-Id: I6cf7d3adf912f0fa98d1ef5c02abea2f4331ec4b	6 years ago
Flaviu Mates	2f5dcfe343	TT#63503 - Fix changing timeout for call forwards ... * The timeout was defaulting to 300 for any call forward besides URI. Removing a sepcific validation for this case fixed the issue Change-Id: I2658d77cee08567047c40fb2b3711f5870b49d25	6 years ago
Guillem Jover	6351678560	TT#60750 Use modern commands in preference of deprecated ones ... Change-Id: I6aa4c792c30e40656efc0802504bc16c4df896ae	6 years ago
Rene Krenn	2391e3ce37	TT#62063 fix ac string instead of numeric comparison ... Change-Id: Ieaeee4b49bf1056b24a92fcdacea8f066f45e8cd	6 years ago
Irina Peshinskaya	68436b044d	TT#55366 Fix strings comparison in datatable multifield ... + use table specific checked_fields for cases when page has some datatable_multified fields Change-Id: I6e943d33787e5cdfc0d47290bb988d9eed6c8a19	6 years ago
Kirill Solomko	63740095cf	TT#56602 no apply_rewrite for a terminated prov subscriber ... * add a check in Subscriber::apply_rewrite that the provisioning subscriber object exist, to address cases when a subscriber is terminated Change-Id: I1ad16f448c4efcf80eedb08ef3f6c014769ff5fd	6 years ago
Andreas Granig	89ac5b9d6b	TT#52989 Fix device-id handling in panel UI ... The is_devid and devid_alias were not properly saved and re-loaded in edit, nor was their status shown in the master data. Change-Id: If3403b5baa6135b4171e7b523aaa56de0fc5cb10	6 years ago
Kirill Solomko	2a6dffa62e	TT#47010 add per subscriber header manipulations ... * UI: subscriber Preferences" page now contains a new "Header Manipulations" tab that enables setting header manipulation rules per subscriber. They are applied in the following order: - domain header rule set is applied (if defined) - subscriber header rules are applied (if defined) An internal header rule set is now created per subscriber automatically, if used from the UI * API: /api/headerrulesets now supports "subsriber_id", when a whole collection is fetched without ?subscriber_id only records where subscriber_id = NULL are returned by default * fix "read only" UI elements representation in the datable for header rule sets, rules, conditions, actions Change-Id: I3e80d1899c577055f3603e80bb3a13d70c5b22cf	6 years ago
Andreas Granig	d5ba7c11cb	TT#52989 Implement device alias provisioning logic ... Change-Id: I7dc14a2f8fdcfa507a5e46872421923b44f133bc	6 years ago
Irina Peshinskaya	e9486b891d	TT#50802 Consider terminated subscribers in alias management ... Alse renamed relation between voip_numbers and billing.voip_subscribers as primary number owners Change-Id: I5343a6d4d3c3e4593d41cfabb30cb7ec84bfda0f	6 years ago
Kirill Solomko	59a960b784	TT#47587 fix get_subscriber_location_rs ... * get_subscriber_location_rs for the DB model tried to determine filter based only on username and domain for the multidomain option but another use of the function was with passing only the id. Since the filter argument is built outside the function with already checking for the multidomain option there is no need to rely on the filter parameters in the function itself. Change-Id: Ie5ad7e58404400d0dda0300720edd55f38eca09c	7 years ago
Irina Peshinskaya	d003c66e7e	TT#45484 Add "force_delete" option to callrecordings ... Change-Id: I49c736a833583028f0a3f5382c93e4a08c81ed00	7 years ago
Irina Peshinskaya	b6ea54b12d	TT#40453 Remove callrecording files from WEB UI ... Change-Id: I89e1ce786385c43c0f884bc856c494600faacdb2	7 years ago
Irina Peshinskaya	cfa7cb4408	TT#43351 Keep high priority of current profile_set for subadmin ... Change-Id: I1f802212d22b023288381b719763c668166035db	7 years ago
Irina Peshinskaya	b1e4733d00	TT#43351 Check subscriberadmin access to profile and profile_set ... Unify UI and API code to make subscriberadmin behavior with profile_set and profile common Change alias_numbers input field to embedded RepeatableJS so it pass form validation Change-Id: I1b3dc6f88cc6c1f43d76acc8e339dbb664c166a3	7 years ago
Irina Peshinskaya	49e9e49b74	TT#44077 Disable subscriberadmin creation for subadmin in API ... And add checking of used customer to limit subscriberadmin and reseller to own customers Change-Id: I979afe8d2babaa0df3ac7106cb9d423548d3634c	7 years ago
Irina Peshinskaya	cf0a6a3684	TT#42860 Add proper reseller checking to subscribers API ... Change-Id: I5bb688af5f1a247bb99d198daaf17f8523d22b3a	7 years ago