3454 Commits (e1efd6cc484f3185803524ea2885b42625306bc3)

Author	SHA1	Message	Date
Kirill Solomko	e1efd6cc48	TT#139550 vmnotify use correct uuid ... * wrong value was used in the vmnotify select query, now the correct uuid is used Change-Id: I311cc7ea9cce01014dd40761d0bc7f594ecca7b2 (cherry picked from commit 67bc755276)	4 years ago
Kirill Solomko	ee1d59c68e	TT#139550 improve vmnotify messaging ... * improve select from voicemail_spool to avoid sequental scan with like '%..' * select now fetches all messages count * add old messages count support * old/new messages are reported as 0 if not returned from voicemail_spool Change-Id: I11ac1a407e8d22fe828a17cda55aa3298c6e6f02 (cherry picked from commit 68dcad8c70)	4 years ago
Alexander Lutay	07cf1e5210	TT#141802 use proper SNOM param 'setting_server' on SRAPS ... For some reason SNOM SRAPS has two parameters with identical 'param_name'='setting_server': * "Settings Server URL" * "Settings Server" NGCP need to use the second one on SRAPS to set device redirect URL. We were receiving it by luck in the past. The commit e548057d4 introduced performance improvement to 'last' the search in loop after finding the proper 'param_name'. As a result of improvement we set wrong option on SRAPS. Dump of options for the history: * "Settings Server URL": >{ > 'links' => { > 'self' => 'https://secure-provisioning.snom.com/api/v1/settings/5683038cec6c4fa9be95b2de9d1750e8', > 'group' => 'https://secure-provisioning.snom.com/api/v1/setting-groups/8ab9230acf3f4060868509a93ad53f3f' > }, > 'attrs' => [], > 'choices' => undef, > 'default_value' => undef, > 'description' => undef, > 'field_type' => 'url', > 'fkey' => $VAR1->{'indexed'}{'enabled'}, > 'group' => '8ab9230acf3f4060868509a93ad53f3f', > 'multiple' => $VAR1->{'indexed'}{'enabled'}, > 'name' => 'Setting Server URL', > 'no_profiles' => 164, > 'param_name' => 'setting_server', > 'product_groups' => ['6cdbd3dfe5fe40e28c909f118a509b8a'], > 'section' => 'global', > 'sortable' => $VAR1->{'indexed'}{'enabled'}, > 'uses_permissions' => $VAR1->{'indexed'}{'enabled'}, > 'uuid' => '5683038cec6c4fa9be95b2de9d1750e8', > 'indexed' => { > 'default_size' => 4, > 'max_size' => 0, > 'start' => 0, > 'enabled' => bless( do{\(my $o = 0)}, 'JSON::PP::Boolean' ) > } >} * "Settings Server": >{ > 'links' => { > 'self' => 'https://secure-provisioning.snom.com/api/v1/settings/50a400560eec4dc0b96b026094e06562', > 'group' => 'https://secure-provisioning.snom.com/api/v1/setting-groups/8ab9230acf3f4060868509a93ad53f3f' > }, > 'attrs' => [], > 'choices' => undef, > 'default_value' => undef, > 'description' => 'Setting Server for Desk phones', > 'field_type' => 'text', > 'fkey' => bless( do{\(my $o = 0)}, 'JSON::PP::Boolean' ), > 'group' => '8ab9230acf3f4060868509a93ad53f3f', > 'multiple' => $VAR1->{'fkey'}, > 'name' => 'Setting Server', > 'no_profiles' => 3189, > 'param_name' => 'setting_server', > 'product_groups' => ['1a45a2a3f6b94c4cbfa5439b446132f7'], > 'section' => 'phone-settings', > 'sortable' => $VAR1->{'fkey'}, > 'uses_permissions' => bless( do{\(my $o = 1)}, 'JSON::PP::Boolean' ), > 'uuid' => '50a400560eec4dc0b96b026094e06562', > 'indexed' => { > 'default_size' => 4, > 'max_size' => 0, > 'start' => 0, > 'enabled' => $VAR1->{'fkey'} > } >}; The commit introduces the second filtering parameter 'section'='phone-settings', as we cannot rely on any other parameters. Change-Id: Iec2b2a0c2068efb90af20af3dba711dfc7f55ca8 Fixes: commit e548057d40 (cherry picked from commit f1e00a0408)	4 years ago
Rene Krenn	51b7aa4174	TT#144000 add lnp_provider form field to /api/ncoslnpcarriers ... Change-Id: Ic574980aee14d1a9400857332f7cd919e7fd687a (cherry picked from commit bd2c1760b3)	4 years ago
Kirill Solomko	6824a76b92	TT#144254 Rework ALE devices provisioning bootstrap ... * move to_log() and data_to_str() methods to the parent VendorREST module * rename send_request() to send_http_request() * use common send_http_request method for HTTP requests dispatching * improve logging * improve error handling Change-Id: I403aa8053e4abfaf6992b62809f15ab72e3a06fc (cherry picked from commit 1c10d54924)	4 years ago
Alexander Lutay	b440ebe6bd	TT#141802 Improve Snom profile SRAPS handling code ... * add common send_request method for HTTP requests dispatching * improve logging * improve error handling Change-Id: I72ffc6874bf89219ccfd764696bec0c99111d8b3 (cherry picked from commit e548057d40)	4 years ago
Rene Krenn	67c51b805e	TT#144000 fix /api/ncoslnpcarriers rail ... the form used for the /api/ncoslnpcarriers rail uses the same technique to expose a JSON field "carrier_id" for the table column "lnp_provider_id", also found in the /api/lnpnumbers rail implementation. it however did not work until now, because the fieldname in the render_list did not match. Change-Id: I45dca22bab73e16b538de7ea1d540aa1383fb56d (cherry picked from commit 053b013edf)	4 years ago
Kirill Solomko	7ae21b8f00	TT#134254 change MailToFax From email field type ... * the field type is now Text to enable regexp support Change-Id: Ia205ae2de1bb04c4d7d82cfe3e3874b0cfebadbb (cherry picked from commit 79b2a985e0)	4 years ago
Kirill Solomko	aaec378712	Revert "TT#134254 change fax destination email field type" ... This reverts commit 7e6c05f097. Change-Id: I65793f35d35a7119725f3840d302c37ddc0af587 (cherry picked from commit b5cedff911)	4 years ago
Kirill Solomko	2f991a08b8	TT#134254 change fax destination email field type ... * Email field is now Text to work with scenarios when use_regex is enabled Change-Id: Ibd8d1932e8ed3bcec6c4a6a08cbc16e5a192a617 (cherry picked from commit 7e6c05f097)	4 years ago
Alexander Lutay	d767324654	TT#141802 Add firmware 'tags' support for 'version' firmware endpoint ... Improve NGCP to return firmware using the 'Firmware tag' if not such 'Version' found: >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/version/10.12.22.1 > firmware 10.12.22.1 >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/version/tag1 > firmware 10.12.22.1 >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/version/10.32.1.0 > firmware 10.32.1.0 >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/version/mytag > firmware 10.32.1.0 Change-Id: Ie6a75d82887d4b9945a04e599991d8996ede00d6 (cherry picked from commit 8516d817c6)	4 years ago
Alexander Lutay	253c4393a0	TT#141802 Add firmware 'tags' support for 'next' firmware endpoint ... Historically NGCP supported Firmware tags for endpoint 'latest' only: > http://<ngcp_fqdn>:<bootstrap_port>/device/autoprov/firmware/<mac>/from/<current_firmware_version>/latest/<tag> For example: NGCP has 7 firmwares configured for SNOM D715 with MAC 0004138aa403. For the simplicity let's call firmwares versions: 1, 2, 3, 4, 5, 6, 7. the firmwares '4' and '6' has the same tag 'mytag'. The latest firmware is firmware with id '7' and it has no tag set. The endpoint 'latest' gives access to firmware '6' only: >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/from/0/latest > firmware 7 >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/from/0/latest/mytag > firmware 6 This commit adds 'tags' support for enpoint 'next'. It allows to address the complete chain of firmwares using tags: >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/from/0/next > firmware 1 # the next firmware after version '0' is firmware '1' >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/from/0/next/mytag > firmware 4 # the next firmware after version '0' with tag 'mytag' is firmware '4' >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/from/2/next/mytag > firmware 4 # the same as above, the firmware after version '2' with tag 'mytag' is firmware '4' >> curl http://myserver.com:1445/device/autoprov/firmware/0004138aa403/from/4/next/mytag > firmware 6 # the next firmware after version '4' with tag 'mytag' is firmware '6' P.S. $tmp variable was not in use, removed. Also improve the 404 output for the 'tag' case. Change-Id: Ifb896e1aef7b57328ab6492236768bc15ca8cc9e (cherry picked from commit 31d954dfa8)	4 years ago
Alexander Lutay	a0f24f899f	TT#141802 Add MAC to default SNOM 'bootstrap' URL on SRAPS ... By default NGCP created bootstrap URL on SRAPS as: > http://ngcp.server.com:1445/device/autoprov/bootstrap/ while we need to append it with MAC at the end, as SNOM has device specific firmwares and NGCP need to know MAC to find the device model and return proper firmware to upgrade. The proper bootstrap URL is: > http://ngcp.server.com:1445/device/autoprov/bootstrap/{mac} After firmware upgrade SNOM device will connect to secure URL: > https://ngcp.server.com:1444/device/autoprov/config/{mac} P.S. re-using Panasonic approach for SNOM devices with a difference: Panasonic uses label '{MAC}' and SNOM uses '{mac}'. Change-Id: Ib1530f1adf1154deb5a8fb8a7d856810885f4736 (cherry picked from commit b106891f68)	4 years ago
Alexander Lutay	8a34771917	TT#141802 Fix 'bootsrap' PBX devices config generation ... Otherwise PBX devices config geenration failed with error: > 500 - error creating template: > error processing template, type=undef, > info='Can't use string ("") as a HASH ref while "strict refs" > in use at /usr/share/perl5/NGCP/Panel/Template/Plugin/DeviceConfig.pm line 50. ' It happens because no preferences access defined for 'bootstrap' PBX access (port 1445), they are available for 'config' access only (port 1444). Change-Id: Id2c1478678265144b8ddb83504a0d3c9cec16563 (cherry picked from commit 725cbfb741)	4 years ago
Kirill Solomko	0fea023a7c	TT#139550 fix ngcp-vmnotify system call to use the correct args ... * uuid arg is mandatory now and it is added to the ngcp-vmnotify invokation Change-Id: Ie36b06d7abf700fe65a965c0ea8dbe813dc4faa2 (cherry picked from commit 471b9fe861)	4 years ago
Alexander Lutay	94f8e6eaab	TT#142402 Fix v1 'Back' button navigation on v2 (iframe inside iframe) ... The ngcp-panel v1 codebase uses 'back=' GET parameters to record all the navigation path and store it into the session array: '$c->session->{redirect_targets}'. On switch from v1 to v2 using the link 'GO TO NEW ADMIN PANEL', the function 'login_to_v2' is not using the concept of 'back=' GET param, but ngcp-panel still receives and stores the last value with 'empty' path: > $VAR1 = bless( do{\(my $o = 'https://x.x.x.x:1443/')}, 'URI::https' ); > $VAR2 = bless( do{\(my $o = 'https://x.x.x.x:1443/subscriber/155/details')}, 'URI::https' ); > $VAR3 = bless( do{\(my $o = 'https://x.x.x.x:1443/subscriber')}, 'URI::https' ); > $VAR4 = bless( do{\(my $o = 'https://x.x.x.x:1443/dashboard')}, 'URI::https' ); The navigation above is a recorded browsing path on v1 (in a reverse order): - login to ngcp-panel (dashboard page is opened), - open 'Subscribers' - open details for some subscriber with id 155 - open subscriber preferences - click on link 'GO TO NEW ADMIN PANEL'. As a result user is still located on the same page "Preferences", but not on v1 but v2 interface. The empty value is inserted into the array '$c->session->{redirect_targets}' (which is wrong). The empty path 'https://x.x.x.x:1443/' brakes v2 navigation for v1 'Back' button inside iframe. It causes loading of iframe inside iframe, which happens on v2 due to list of redirections: - clicking on v1 button 'back' inside v2 iframe requests https://x.x.x.x:1443/back - it triggers navigation to the top element array 'https://x.x.x.x:1443/' which is wrong/corrupted. - loading '/' cause 302 redirect to '/v2/' (as 'v2' is a default UI for mr10.0+) - loading '/v2/' inside iframe cause the issue with 'v2' content inside 'v2' iframe. This is a commit to prevent inserting an empty 'back_uri' into the session array '$c->session->{redirect_targets}'. Change-Id: I69df4320fa8cde4d23a7d9dd18ffb5eb06ee8df1 (cherry picked from commit 1840af1eb2)	4 years ago
Alexander Lutay	7c7453f3a8	TT#142402 Improve 'framed' session behaviour when users are using v1 and v2 in parallel ... The modern browsers (except Safari) supports 'Sec-Fetch-Dest': https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Sec-Fetch-Dest In theory we can remove the current 'framed session' storage completely, but Safari will not be supported. Let's expand the current logic to provide extra protection here to backport the commit to mr9.5+. Change-Id: I9c070f77f427c81581f4d9ceeb1a57b274d77819 (cherry picked from commit 3cc01922e7)	4 years ago
Rene Krenn	34605f390f	TT#142001 do not quote LI numbers in Response err messages ... the G2k/LIMA implementation seems to have our error messages hardcoded in their logic. it stareted to fail since we added logline obfuscation, which was also added to response messages in this place. Change-Id: I36c2a74ed17db7013e692d7cbdccf0dbd44e814e (cherry picked from commit 2162adcb6ba381dab849259bba56bc2d85b0d9b0)	4 years ago
Kirill Solomko	476f93778b	TT#133800 fix webpassword, change subadmin expose password ... * webpassword is not correctly removed based on length, and remain visible when in plain-text or empty (unset) * config->security->password_(sip|web)_expose_subadmin now only affects subscribers under the same customer that are not this subscriber admin Change-Id: I329e0f1ad97dd513a33e3652ed03b4a43a95ed04 (cherry picked from commit 535c38cd93)	4 years ago
Kirill Solomko	d1e119445b	TT#129162 Admins fix password field transformation ... * password field is virtual and needs to be transformed into saltedpass, restored the removed logic that does that in process_form_resource() Change-Id: I8baabbef2bdb46db850e12b6e0c638ca5c3deddf (cherry picked from commit 992c9f1e48)	4 years ago
Kirill Solomko	9838121715	TT#129162 fix subscriber webpassword field validation ... * 'webpassword' field is now also validated for invalid (non-ascii) characters * Fix multiple APP input field validation erros to comma joined. * Adjust 'webpassword' field validation errors to have better readability when there are multiple validation errors Change-Id: I21536f97a4da78cc5192a3abd8cd5adef1b819ec (cherry picked from commit cc10506b2e)	4 years ago
Kirill Solomko	2a438339ef	TT#133901 fix administrative flag for subscriberadmin ... * 'administrative' field is read only for susbcriberadmin role and that caused it to be removed from the final update 'resource', setting it to 0 if not existed. now the 'administrative' field is only changed in the database if it's defined in the 'resource'. Change-Id: I50738a77052c2163b19b2a42293c7a00e2780bc3 (cherry picked from commit 3ef167575c)	4 years ago
Kirill Solomko	1870bb7bdf	TT#130750 do not pack() jwt secret ... * the extra packing of the secret key during encode/decode conflicts with the API v2 implementation * move JWT "typ" from the payload to the header Change-Id: Ica5822d810d6eaf7b3ae017f7037f25637b6f861 (cherry picked from commit 53408c2e94)	4 years ago
Victor Seva	5b9bbabf2b	TT#137602 prosody: domains are treated as lowercase ... Change-Id: I65af0765112cbf4ba52daf2baf28043197ebeae3 (cherry picked from commit 883cf884f2)	4 years ago
Victor Tsvetov	a38e843adb	TT#137552 Update German translations ... Import new translations from Crowdin. 99% translated 81% approved Change-Id: I78db4d313fb1ae8481fe82a8aa15cf8bdedba8c5 (cherry picked from commit c9e56364a4)	4 years ago
Rene Krenn	4155971dd5	TT#134807 "ignore domain" option for billing profiles ... fee matching works in 2 attempts: 1. try to find a fee matching <user@domain> 2. if none found, try to find a fee matching <user> the billing_profile record will get a new field "ignore_domain". if set to "1", step#1 above should be skipped. Change-Id: I7f0a8f1dd8d5699ad4e2b8242c68fb9f75fc1bff (cherry picked from commit 48f8938dfd)	4 years ago
Kirill Solomko	87b706d595	TT#133800 fix webpassword field removal ... * webpassword field was unconditionally deleted in API GET and DELETE methods, it now relies on resource_from_item for the common approach Change-Id: I703158fd2022b49a49470db28cb22f37e613f841 (cherry picked from commit 02f3f6b3a1)	4 years ago
Victor Tsvetov	b9d0d148aa	TT#126853 Replace "free minutes" with "free calling time" ... The value of "interval_free_time" preference is specified in seconds. To avoid confusion, use the term "free calling time" rather than "free minutes" in tooltips. Change-Id: Ia4bd507e4a2281723fd2168a34b2178bf404f867 (cherry picked from commit 0592f3f731)	4 years ago
Kirill Solomko	2c5e4d5ab8	TT#133800 fix password fields behaviour in API ... * PATCH: password fields are not removed when resource is created for apply_patch(), they are removed under the same condititions later when hal is generated, that is to ensure that admin users without the 'show_passwords' flag as well as subscribers will not run into situation when they use PATCH and cannot apply it for "path": "/password" or/and "path": "/webpassword", as they were removed before apply_patch() * rework encrypted webpassword detection. webpasword is detected as encrypted if its length is 54 or 56 and it contains at least one '$' char, there is a chance for false positive detection when a user provides with a plain-text password with the same pattern but it's very unlikely, as well as since mr8.5 webpasswords are expected to be encrypted, and moreover worth case scenario is that the plain-text password will not be returned to the user Change-Id: I8ea739cbf728b2134f3ce00cee29da42ab3fb4a3 (cherry picked from commit c50b49db96)	4 years ago
Victor Tsvetov	e4bded2d27	TT#115002 Fix collecting i18n strings from Forms ... Fix ngcp_panel_dump_db_strings.pl to load Forms modules properly. Make modules not to fail when they are called without ctx context. Change-Id: I695978b1831068f37198bce9f6a5b9e406d79ede (cherry picked from commit 21bbb382d6)	4 years ago
Alexander Lutay	8de7b9f2d6	TT#130659 Improve path debug output in panel-debug.log ... It is much more usable to see the debug information as URLs: > Jul 22 08:24:53 sp1 ngcp-panel: DEBUG: *** New GET request on path: / > Jul 22 08:24:53 sp1 ngcp-panel: DEBUG: *** New GET request on path: /subscriber > Jul 22 08:24:53 sp1 ngcp-panel: DEBUG: *** New GET request on path: /subscriber/ajax Instead of Catalyst oriented way: > Jul 22 08:24:53 sp1 ngcp-panel: DEBUG: *** New GET request on path: > Jul 22 08:24:53 sp1 ngcp-panel: DEBUG: *** New GET request on path: subscriber > Jul 22 08:24:53 sp1 ngcp-panel: DEBUG: *** New GET request on path: subscriber/ajax Change-Id: I38699152e232c5f5aa2ef218db9bf61c692bbf33 (cherry picked from commit 12c2911fe4)	4 years ago
Alexander Lutay	a48ed18570	TT#130659 Improve debug log layout (common style, removing plus/star markers) ... It was close to impossible to read ngcp-panel debug log due to: * missing clear marker of the start reuqest processing, use '***' once only * some personal markers (like '+++++++') have been removed as they have no meaning for other developers. Let's remove the personal markers and work to make the panel debug log well readable for all developers. Change-Id: I69faff3ab2258fc156e88c7b8da0edfef14c3e6e (cherry picked from commit 6fbf99e461)	4 years ago
Alexander Lutay	d25ed73bcc	TT#130659 Stop calling systemd openvpn status twice on every HTTP request ... The ngcp-panel<=>openvpn functionality has never been finished but on every HTTP requset ngcp-panel was asking systemd about openvpn status. Twice! From /var/log/ngcp/panel-debug.log : > Jul 19 09:36:32 sp1 ngcp-panel: DEBUG: Path: dashboard > Jul 19 09:36:32 sp1 ngcp-panel: DEBUG: systemctl list-unit-files openvpn.service > Jul 19 09:36:32 sp1 ngcp-panel: DEBUG: systemctl is-enabled openvpn@ovpn > ... > Jul 19 09:36:33 sp1 ngcp-panel: DEBUG: Path: dashboard/ajax/peering_sum > Jul 19 09:36:33 sp1 ngcp-panel: DEBUG: systemctl list-unit-files openvpn.service > Jul 19 09:36:33 sp1 ngcp-panel: DEBUG: systemctl is-enabled openvpn@ovpn > ... > Jul 19 09:36:33 sp1 ngcp-panel: DEBUG: Path: dashboard/ajax/emergency_mode > Jul 19 09:36:33 sp1 ngcp-panel: DEBUG: systemctl list-unit-files openvpn.service > Jul 19 09:36:33 sp1 ngcp-panel: DEBUG: systemctl is-enabled openvpn@ovpn It is unnecessary load, moreover for not-yet finished feature. Let's move openvpn WIP functionality into 'NGCP Support Status' page and finish it there one day. The goal of this commit is to stop DOS'ing systemd. Change-Id: I6c9ba9e1b218e58b5adffe741f4490b3729d17e7 (cherry picked from commit 6263f167e2)	4 years ago
Kirill Solomko	4627e2e5a4	TT#127357 /api/callists return correct call type ... * /api/callists "type" field now contains the same call type value as it is in the database, for flexibility so that customers can implement their own logic around it, as well as filtering by the query parameter "type" works as expected. * For history: in /api/callists in case of direction "in", the type was replaced with type=call regardless of the what was in the database Change-Id: I1174b34747fe1b739cd6bfc050911c58c4b0964a (cherry picked from commit 118d2c3d5c)	4 years ago
Kirill Solomko	351a8c36cc	TT#121250 improve sip_lcr_reload and sip_domain_reload ... * sip_lcr_reload is now called after "commit" in all API endpoints, to correctly reflect updated DB changes. It was correct in /api/peeringrules POST but not correct in DELETE, as well as also not correct in /api/peeringservers and /api/peeringgroups * sip_domain_reload does not check if the domain is successfully reload in kamailio proxy as is logic is redundant, it fails however if domain reload XMLRPC request failed on any available proxy servers. Another reason is by default tcp_conn_wq_max in kamailio-proxy is 32KB by default and that causes an impact when domain.dump XMLRPC is used on very large domain sets (600+), as well as sip_domain_reload has improved performance with the removed XMLRPC domain.dump body parsing. Change-Id: I17c5718198b06b1ce78b2654f3d7c3bd2830f60b (cherry picked from commit d17c4be4a5)	4 years ago
Kirill Solomko	ab4d8e22f1	TT#130450 use uuid in /api/cfdestinationsets /api/cfmappings ... * unify the logic and use uuid in /api/cfdestinationsets and /api/cfmappings if the subscriber's primary number is empty Change-Id: Ibdb7e2a2bcd33165be5ec1d92c4f1df24f59405a (cherry picked from commit 1dfdad0a8f)	4 years ago
Flaviu Mates	db8f0feff6	TT#126601 Implement /api/authtokens endpoint ... * the endpoint will receive "type" (expires|onetime) and "expires" (positive integer representing seconds) * type will define the expiray method for the token; onetime: the token expires as soon as it's used, or after "expires" seconds if not used expires: the token can be used multiple times until it expires according to the "expires" param value * login_jwt endpoint for generating the JWT token for subscribers has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * admin_login_jwt endpoint for generating the JWT token for admins has been enhanced to accept the "token" param, containing the token generated using the /api/authtokens endpoint * login_jwt and amin_login_jwt will respond with 403 "Forbidden" if the token role stored in Redis does not match the role of the user that generated it * /api/authtokens is hidden from documentation for now Change-Id: I4eb76c2b08f2e24774fa84ba0ccf7412ce8670e8 (cherry picked from commit 9b422ddabf)	4 years ago
Rene Krenn	944823b780	TT#121500 fix missing mos_data in /api/conversations ... Change-Id: Ia0a549a96d1fd311021a474d5098b1ab859e5a31	4 years ago
Alexander Lutay	1961077d73	TT#128256 Add localisation for phonebook 'Upload CSV' page ... Otherwise localisation is missing for 'Upload CSV' page https://x.x.x.x:1443/phonebook/upload_csv Change-Id: I5c174cecf0d74486e8b700d2b1aca6b87e43b15b (cherry picked from commit 8885d06a42)	4 years ago
Rene Krenn	5c5047a070	TT#121500 fix missing mos_data in /api/callists ... Change-Id: I4e958dd6ec05042c6ee18bbd7ed7186792a6be50 (cherry picked from commit 2b751b139d612d20964e7ba236c60a2a1b316d86)	4 years ago
Alexander Lutay	9672a3c4c1	TT#122202 Re-enable use_session for realm api_subscriber_jwt ... Otherwise v1 session (cookies-based) is not created and v2 CSC cannot load v1 "iframe" content. Also it was impossible to switch between v1 and v2 CSC. Change-Id: Iab3fac6e8da6e5a2e81a0626a3db6faa3e011396 (cherry picked from commit 3ba08f45ac)	4 years ago
Kirill Solomko	698c0215aa	TT#129162 fix passwork characters check ... * check that the password variable contains a value Change-Id: Iba1cf809d5cd81b3dbbeb4686765a667e339d93f (cherry picked from commit 63812835c0)	4 years ago
Kirill Solomko	a2002e118a	TT#129162 respect framed setting for root default ... Change-Id: Ibced32326b213ba2d8cce90cc5d915e464b56027 (cherry picked from commit 407490c101)	4 years ago
Kirill Solomko	cefd712509	TT#129162 add bcrypt password characters check ... Change-Id: I08723d02a7e4bc042351444b201d1f96cc986af3 (cherry picked from commit f4597b6ed7)	4 years ago
Kirill Solomko	871fbe41e2	TT#129162 tighten user access checks ... * add additional centralised checks for inactive and read_only users. * use_userdata_from_session=0 now for all auth realms to cause the data re-fetched from the database, to avoid scenarios when a user is set as inactive or read_only and UI keeps using the cached data. the change only affects cookie and JWT subscriber based sessions as in all other cases, the auth data is fetched from the storage regardless. * add is_active=1 flag for the internal 'system' role, as otherwise access would be permanently denied for it. * default 403 error for denied api requests is changed to "Forbidden" instead of "Forbidden path". Change-Id: I1d6d3c765ca8e017e11845c1f5260243a3963c3b (cherry picked from commit 20e77c7b54)	4 years ago
Victor Tsvetov	e85042c4df	TT#129160 Complete missing Russian translations ... Add missing translations. Some of them are machine-translated and require later proofreading. Change-Id: I18a8e87938665e705ba045eb9b9fccbd8c3fc34e (cherry picked from commit 829479e153)	4 years ago
Flaviu Mates	128d07347a	TT#128850 Fix 500 eror on /api/preferencedefs ... * add quotation with ~ for square brackets ([]) comming from the database, as it is needed for I18N Change-Id: Ia1253e90d47858a930a4a9569c2d27993a0cd4bc (cherry picked from commit 131fe8e270)	4 years ago
Flaviu Mates	18c4692fcc	TT#128552 Add filtering by name for /api/billingprofiles ... Change-Id: I8b62b4b7ad4aec3d0538fb84a3b73e451fcb1db1 (cherry picked from commit c1752e7e82)	4 years ago
Flaviu Mates	87c1305ca0	TT#128253 Add localization support for /api/.+preferencedefs ... Change-Id: Ibee6b7c4952167a112c80d6972b7a9471a6ff958 (cherry picked from commit f27eedf33c)	4 years ago
Rene Krenn	7fa17c8c74	TT#118802 log raw perl catalyst request time ... (cherry picked from commit 05f2f1137d6d3ce1deb1880eb1427b94e409c691) Change-Id: I6bda815d2ccf2800a0a352c0d44aaee8039ee8d5 (cherry picked from commit 40c4ade6ea)	4 years ago