b4c9f64721
Issue token on password reset and setup
2018-08-21 18:42:18 -07:00
f05df7cfef
Allow set admin flag on user creation
2018-08-21 17:12:46 +02:00
6a1a697820
Split the invite route into two
2018-08-17 16:27:29 -07:00
af58e56732
Fix issue where normal users are shown all apps
2018-08-16 20:04:03 -07:00
8bd6c9933f
Add interval secs
...
Part of #568
2018-08-13 22:35:38 -07:00
bf1e19f8e6
Add more detailed checking of DMARC
...
Fixes #570
2018-08-12 13:47:24 -07:00
75b6688734
Clear timeout when setting backup config
2018-08-05 22:29:27 -07:00
f7a7e4e95a
Fix text in account setup screen
2018-08-05 21:58:07 -07:00
a0a523ae71
spaces: verify app ownership in app management routes
2018-08-03 17:35:58 -07:00
fba70d888b
Remove tokenScopes
...
decided that the UI won't use this any more and will just the admin flag
2018-08-03 10:07:23 -07:00
d3f9647cd5
Add settings for Spaces
2018-08-03 09:40:57 -07:00
2a49569805
Send admin flag in the profile
2018-08-03 09:34:25 -07:00
d8257c4745
refactor updater logic into updater.js
2018-07-31 20:20:10 -07:00
554006683e
Only unset of admin flag is disallowed
2018-07-26 23:43:44 -07:00
78a2176d1d
Make admin simply a boolean instead of group
...
This simplifies a lot of logic. Keeping an admin group has no benefit
2018-07-26 22:29:57 -07:00
b4d5def56d
Revert role support
2018-07-26 13:23:06 -07:00
0cb03e3789
Add REST route for platform config
...
Fixes #566
2018-07-25 14:09:15 -07:00
c09ae963e9
merge set/addDnsRecords
...
This also makes the update mail domain route redundant
2018-07-25 10:51:21 -07:00
c063267c72
Split setting of dns records from mail config route
...
This allows us to enable email server but not setup the dns records
yet. Useful for importing existing mailboxes from another server
without adjusting the DNS.
2018-07-25 10:29:28 -07:00
6be062f8fd
Return empty object for angular
2018-07-24 22:19:34 -07:00
6810c61e58
Add audit event for ownership transfer
2018-07-05 13:51:22 -07:00
8a1de81284
Cleanup sysadmin backup trigger test to only test for backup start event
2018-06-30 14:33:51 +02:00
b1b848de21
Support configuring alternateDomains for apps
2018-06-29 23:14:06 +02:00
35c9e99102
Move the update info into separate route (since it is sensitive)
2018-06-28 17:50:27 -07:00
cab9bc3a61
Unify the config routes into /api/v1/config
...
No more separate config routes for different types of user
2018-06-28 17:40:57 -07:00
712c920b86
Move caas config to separate route
2018-06-28 17:28:46 -07:00
9978dff627
Add API to set and transfer ownership
2018-06-28 16:48:04 -07:00
ff5bd42bef
remove mostly dead comment
2018-06-28 14:19:56 -07:00
dfa318e898
Add ownerId for apps
...
This tracks who installed the app.
2018-06-28 14:13:12 -07:00
38977858aa
When issuing token intersect with the existing user roles
...
Also:
* Move token validation to accesscontrol.js
* Use clients.addTokenByUserId everywhere
2018-06-28 00:07:43 -07:00
ce4424d115
debug out the scope
2018-06-27 13:54:10 -07:00
6907475f7a
Add app management scope
...
This splits the apps API into those who have just 'read' access
and those who have 'manage' access.
2018-06-26 08:56:30 -07:00
9bf93b026b
rename to removeInternalFields
2018-06-25 16:40:16 -07:00
f932f8b3d3
Add user management scope
...
This splits the user and groups API into those who have just 'read' access
and those who have 'manage' access.
2018-06-25 16:10:00 -07:00
7ab5d5e50d
Add domain management scope
...
This splits the domains API into those who have just 'read' access
(i.e without configuration details) and those who have 'manage' access.
2018-06-25 15:12:22 -07:00
74b1df17c0
Fix groups test and route to make name optional
2018-06-20 09:31:50 -07:00
7880a2f9c3
API returns 403 for incorrect password
2018-06-20 09:27:24 -07:00
8a84872704
Wrong password logs out the user
2018-06-18 18:52:35 -07:00
5d13cc363f
Allow group name to be changed
2018-06-18 18:30:40 -07:00
ff73bc121f
Make tokenScope plural
2018-06-18 15:10:02 -07:00
6cd0601629
Map group roles to scopes
2018-06-18 14:52:39 -07:00
7f3114e67d
Rename to get/setMembership (to indicate IDs and not group objects
2018-06-18 13:57:17 -07:00
1dbcf2a46a
Rename to groups.update
2018-06-18 13:41:27 -07:00
898cbd01b3
tokens table always has canonical scope
2018-06-17 23:11:36 -07:00
b6b7d08af3
Rename to accesscontrol.canonicalScopeString
2018-06-17 22:43:42 -07:00
6a2dacb08a
Make intersectScopes take an array
2018-06-17 22:39:33 -07:00
ad6bc191f9
Make hasScopes take an array
2018-06-17 21:06:17 -07:00
f24a099e79
Remove user.admin property
...
The UI will now base itself entirely off the scopes of the token
2018-06-17 16:49:56 -07:00
156ffb40c9
Remove scope from users.get
2018-06-17 16:07:20 -07:00
db8b6838bb
Move skip password verification logic to accesscontrol.js
2018-06-17 15:20:27 -07:00
Girish Ramakrishnan