119 Commits (b4d61565d2d8ef144bc9274a93145fd68ee9e955)

Author	SHA1	Message	Date
Flaviu Mates	b4d61565d2	TT#114703 Use config flags password_(sip|web)_expose_subadmin in api ... Change-Id: I289a3683c09c098d52c1ddb5a489c8c2093f9c99 (cherry picked from commit 67ca4d5a00)	2 years ago
Rene Krenn	d63745c828	TT#105100 fix update case for webpasswd db encrytion ... Change-Id: I91de91430434edef744c6b3791749ea81053d1cb (cherry picked from commit 8238204682)	4 years ago
Rene Krenn	65634d7014	TT#84329 encrypt/decrypt password, weppassword, pin ... Change-Id: I74ae79b798955e6e20c32a644c739d81786f90c0	5 years ago
Andreas Granig	8f8e1d5fc9	TT#78557 - Use bcrypt to hash webpassword ... * Change the way webpassword is handled accross NGCP Panel UI/API to comply with new password encryption * At login, if password is not encrypted with high cost due to the ngcp-bcrypt-webpassword script, encrypt it with proper cost * Accept old password format as well until all webpasswords are encrypted Change-Id: Iefa9584a62ab4b7d2a224d10bdd415e9cbb8dfb5	5 years ago
Rene Krenn	a11f2bed5e	TT#77452 properly synchronize subscriber create/update ... acquire the billing.contract row lock *before* any unordered billing.voip_numbers rowlocks by sub manage_subscriber_numbers(). - "deadlock" waittimeout errors will cease when creating subscribers concurrently via api - max_subscribers, is_pilot and other per-contract constraints will be respected accurately Change-Id: I73bb7525b327bbb09217b790be9c14cc65ddebcc	5 years ago
Rene Krenn	bfd2b4b5b1	TT#73364 batch provisioning ... implementation of config.yml-based "provisioning templates" for creating a subscriber setup with one click or batch-wise (.csv upload), currently comprising of: - contact - contract - contract prefs - subscriber - subscriber prefs - trusted sources - registrations Change-Id: I0c3c1ef93bbe0ca926bbe906a35346bef5094fac	5 years ago
Flaviu Mates	a4265a91e0	TT#69503 - Change subscriber's domain assignation logic ... * Only allow to assign domains for subscribers from the same reseller as subscriber's customer * Change Subscribers.yaml test to retrieve a domain for testing from the same reseller as subscriber's customer Change-Id: I6c7cc7a9874207cfcd63360a6f87e2fd6841011c	6 years ago
Flaviu Mates	42473db9d7	TT#64751 - Allow subscribers to change their password ... * Add specific check for non-pbx subscriberadmins Change-Id: I133d1f77fac54ef77182661f3d8eeee71768a4e3	6 years ago
Kirill Solomko	ce664263b2	TT#65101 add ccareadmin ccare roles ... * ccareadmin and ccare roles have full access to Customers, Subscribers and their preferences/settings, and read-only access to BillingProfiles,InvoceTemplates, EmailTemplates * ccare role is restricted to the related reseller Change-Id: I6cf7d3adf912f0fa98d1ef5c02abea2f4331ec4b	6 years ago
Flaviu Mates	6f8a1c8be0	TT#64751 - Allow subscribers to change their password ... * Change permissions to allow subscribers to change their own password Change-Id: Ieee9d1b3d16cab6ce0313491b4d65574039034f3	6 years ago
Flaviu Mates	603351c2d5	TT#59024 - Disable web_password and sip password fields ... for administrators with disabled 'show_passwords' * Add check in master data edit form to disable web_password and sip password fields. * Add check for api GET to not show passwords Change-Id: Icf95cddc07982a698c893661b529e7542002ec60	6 years ago
Rene Krenn	dda5ffe48f	TT#56340 fix subscribers.t not matching obfuscation chars ... Change-Id: I7023d1e23fc397e3556705fc52db50eace6c02b4	6 years ago
Rene Krenn	cae5270af5	TT#56340 panel logline obfuscation ... adds gdpr obfuscation quoting for: + subscriber numbers + subscriber ip addresses + subscriber usernames + any logmessage "DATA": query parameters, form data, response data + subscriber uuid's + call id's + callforward sip uri's the quoting is centralized by $c->qs() ("quote sensitive"), using catalyst plugin mechanism. escape symbols are set to « (\x{ab}) and » (\x{bb}). generate_logfile_data_inventory.pl was modified to mark loglines with "gdpr affected" status, if $c->qs() was used in a log message. Change-Id: I0f42d7992594232ae33e5666b0a64009211c5b76	6 years ago
Flaviu Mates	d59e4c97e2	TT#58570 Fix subscriberadmin PATCH ... * Store provious value for admin flag for subscribers because form field validation was deleting it because it is read-only * Fix DB query that was causing error Change-Id: Ib73b76c2b912c687da1b1c9ea346541b0b32c3a9	6 years ago
Andreas Granig	d5ba7c11cb	TT#52989 Implement device alias provisioning logic ... Change-Id: I7dc14a2f8fdcfa507a5e46872421923b44f133bc	6 years ago
Irina Peshinskaya	b1e4733d00	TT#43351 Check subscriberadmin access to profile and profile_set ... Unify UI and API code to make subscriberadmin behavior with profile_set and profile common Change alias_numbers input field to embedded RepeatableJS so it pass form validation Change-Id: I1b3dc6f88cc6c1f43d76acc8e339dbb664c166a3	7 years ago
Irina Peshinskaya	49e9e49b74	TT#44077 Disable subscriberadmin creation for subadmin in API ... And add checking of used customer to limit subscriberadmin and reseller to own customers Change-Id: I979afe8d2babaa0df3ac7106cb9d423548d3634c	7 years ago
Irina Peshinskaya	cf0a6a3684	TT#42860 Add proper reseller checking to subscribers API ... Change-Id: I5bb688af5f1a247bb99d198daaf17f8523d22b3a	7 years ago
Irina Peshinskaya	9ed0657d4c	TT#40503 Show journal links to allowed roles only ... Change-Id: I547b2db4767b1e383506bc812b6486db944fceec	7 years ago
Irina Peshinskaya	3e95f54c09	TT#40511 Check subscriberadmin edit only own customer subscriber ... Change-Id: Icede280da9f72172eb19e0bf8bdb2ee22befcfc4	7 years ago
Gerhard Jungwirth	d7cb06c215	TT#38811 fix changed subscriber form ... alias_numbers are in a different format than expected by the form. Change-Id: Id3146e0538e3a02aa520c663a641f1eabb0eee06	7 years ago
Rene Krenn	7d045b9ffc	TT#42260 remove prepaid and prepaid_library pref usage ... Change-Id: Iebd75291f0648ea054b82ace4251b1a98e629198	7 years ago
Kirill Solomko	62a81f1ec7	TT#40010 add new call forward type "cfr" ... * "cfr" is for Call Forward Rerouting * "cfr" was not added into the "Secretary Manager" part Change-Id: I8cbc9888e827a343a2f80970f36de7ee011c7c66	7 years ago
Rene Krenn	b35b0e1cbc	TT#35662 move product_id to billing.contracts ... Change-Id: I5381b36e226b1c0c2032fa40c3a082b85485e4ac	7 years ago
Irina Peshinskaya	f103d31d8a	TT#35058 Apply write access checking for subscriberadin on subscribers API ... Change-Id: I0700ea80026bfb959d240b7ed67c88d5a9385ad9	7 years ago
Irina Peshinskaya	8505eb2470	TT#34565 Consider existent but undefined privileges ... Change-Id: I82743bfbddd472c7e99f554ffd8c94d13acc7de9	7 years ago
Irina Peshinskaya	ca8f0c2805	TT#34565 Consider empty privileges for the subscriberadmin ... Change-Id: I3a9680584b56a12c6e1afb814b47938201753125	7 years ago
Irina Peshinskaya	fd6fe07c88	TT#34021 Rename acl to privileges ... Change-Id: Id6eee8009f9a35399b5bffab62913710e0e507a0	7 years ago
Irina Peshinskaya	cb1a3a4cd8	TT#34021 Allow PUT and PATCH to subscriberadmin on subscribers ... Change-Id: I3c3d5b0c5d1bfd4c3c8771ed332cbf00d3d3c1dc	7 years ago
Gerhard Jungwirth	24de4232e6	TT#30507 remove DataHal workaround layer ... (NGCP::Panel was loaded every time this was used) Change-Id: I62861e0756aaaf548c9be42b4842e9a06127119c	7 years ago
Gerhard Jungwirth	edbef3c5b8	TT#29617 remove unnecessary form exceptions ... with the previous commit, there is no need anymore to specify form exceptions manually. validate_form will now automatically consider fields in the correct format with and without "_id" Change-Id: I70afae4003c6407c7a37396630110736f1fb13f8	7 years ago
Irina Peshinskaya	61bf07b038	TT#28510 Remove "domain" from resource for subscriberadmin ... For subscriberadmin domain is taken from the pilot Change-Id: I6aa8da07014c18732df4ffc66bd5c2744fc0e81f	7 years ago
Irina Peshinskaya	77ae84e215	TT#23282 Replace customer field with customer_id for the API subscribers form ... Change-Id: I50eb7b11e520db1509e68f50744b5ee0dab2193c	8 years ago
Irina Peshinskaya	4dc630cd27	TT#22505 TT#21271 Fix subscribers API so get2put works ... Change-Id: I4d5e2abfe96b147362f22d9f715198cf0bd7731a	8 years ago
Rene Krenn	443426674f	TT#22505 safe handling of "" lock level pref values ... Change-Id: I46b0e507daabe1c3af2412cdae1bfe403a85286b	8 years ago
Rene Krenn	d64158cdba	TT#22505 TT#21271 api/subscriber put2get related fixes ... Change-Id: I7d9734c31a75fdaa428f56942f444ab39cd79bc7	8 years ago
Andreas Granig	0d3bf6b1ce	TT#22827 Implement form factory ... This patch reuses existing forms by clearing them, rather than re-instantiating them again and again. Also, panel start time should be better due to less package pre-loading. Change-Id: Ia3e64fd4b4084bb5ec35a669c5840c9fc3c58f2e	8 years ago
Andreas Granig	dc0bd38e73	TT#4333 Fix CF issues for subscribers ... * Fix syntax errors and internal errors * Pass set ids back in mappings * Allow updates of mappings both via name and ids Change-Id: I26fdfe96d67563c11040a6c1e87f13a835bb793f	8 years ago
Andreas Granig	f9030b4f21	TT#4333 subscribers/customers/numbers/CF ACL ... * Implement r/o access to /api/customers for subadmin * Implement r/o access to /api/subscribers for subs * Implement create access to /api/subscribers for subadmins * Implement /api/numbers to re-assign a number * Implement CF endpoints access for subs * Implement new test framework to simplify testing * Fix updating number by using Utils to make sure allowed_clis etc are handled correctly * Install missing docker dependencies for new test framework * Add edr handling on /api/numbers/xx update Change-Id: I678da16cfb1361b2809780cba8c204ac90bb1736	8 years ago
Rene Krenn	ad3562cba8	TT#14295 timezone field for /api/subscribers ... added checking and persisting of timezone for + panel UI subscriber create + POST /api/subscribers + PUT /api/subscriber/x + PATCH /api/subscriber/x + central is_valid_timezone_name method Change-Id: I59865f5af33a71e5b5032dc35ba9c41eca74b04c	8 years ago
Kirill Solomko	8cd3572eed	TT#19855 fix numeric preference value cast to int ... * set it to undef if it is not positive int Change-Id: Iae4094db86124cc277e9e9fb38bb6334c219b95e	8 years ago
Rene Krenn	2ffedda7cd	TT#13754 record primary aliases for edr ... Change-Id: I465d5b1d8915ba617d7bee4dc51dc7f96b57ade5	8 years ago
Irina Peshinskaya	2073b9e760	TT#9309 Introduce local version of the Data::HAL::Link ... Change-Id: Ifdf95cef32f0d118330c20316ed447e00c6dae3c	8 years ago
Irina Peshinskaya	41f32401a7	TT#9309 Introduce local version of the Data::HAL with default forcearray ... Change-Id: Ie33396a75fc6d27fd28fe8f7717caba0a476c776	8 years ago
Rene Krenn	7b646044d8	TT#6735 TT#5850 refactor "profile" events to track number changes ... Change-Id: I59a01ebe0ddb440bc9a4f091c85b84641ae460b1	8 years ago
Irina Peshinskaya	f1971bfcdd	TT#8680 Consider E164 empty fields ... Change-Id: I7accdbfc3421eb0fb94e3d9533a87c5489462bed	8 years ago
Rene Krenn	61a87b9c86	TT#9714 susbcriber first non-prim alias for edr records ... -introduce deferred event record insertion, to span across update_subscriber_number and update_subadmin_sub_aliases calls by handing over a snapshot of aliases before number edit operations -the snapshot is used to persist first_non_primary_alias_before event values -it also is the preparation to derive number change events apart from that, the following was noticed: -fix: start_huntgroup was generated twice -fix: when terminating a subs, the order of end events was not the reverse order of start_events -POST /api/subscribers does not consider pbx alais selection of pilot pool aliases, while terminating the susbcriber does move back alaises to the pilot pool. Change-Id: I092f4a21bed25503f48c47c253f1cae0729f43da	8 years ago
Andreas Granig	776dd24f6f	TT#2371 Implement SMS forwarding ... Change-Id: If3478f7e962aa514931268bc560caa3c1dde9fc1	9 years ago
Irina Peshinskaya	2bce1c979e	TT#5415 Don't touch unchanged pbx groups for member to save members order ... Change-Id: I1412e2c4ac3e6b0662a3f31b002d480165d97040	9 years ago
Rene Krenn	979397cff3	MT#20639 TT#5411 contact termination ... +1. terminate if terminated contracts or subscribers exists +2. if active contracts or subscribers -> error +3. delete otherwise +customer contact api DELETE +customer contact testcases +customer api POST +customer api PUT/PATCH +system contact api DELETE +system contact testcases +contract api POST +contract api PUT/PATCH +panel UI contact delete +panel UI contract create no change panel UI contract update +panel UI customer create no change panel UI customer update note contact links like customers.omm_contact or customers.tech_contact are not considered. Change-Id: I19ea6e2245282485cc30d3e92d17a2eb603e0c2d	9 years ago