Commit Graph

58 Commits

Author SHA1 Message Date
Girish Ramakrishnan
3c4ca8e9c8 reserve more usernames 2016-05-17 12:47:10 -07:00
Johannes Zellner
3adf91afed Add setShowTutorial() api to users.js 2016-05-06 13:56:26 +02:00
Johannes Zellner
778371b818 Only send out mails if the admin group has changed 2016-05-04 13:55:14 +02:00
Girish Ramakrishnan
ffedbdfa13 various minor fixes to eventlog 2016-05-02 10:01:23 -07:00
Girish Ramakrishnan
1f31fe6f8f make user.remove and user.update add eventlog 2016-05-01 20:11:11 -07:00
Girish Ramakrishnan
37bdd2672b make user.create take auditSource 2016-05-01 20:01:34 -07:00
Johannes Zellner
18f3733d6e Simplify the password change logic
We now can use verifyPassword and this makes
user.changePassword() route obsolete
2016-04-17 19:17:03 +02:00
Girish Ramakrishnan
916d97f7bd reserve the no-reply mailbox 2016-04-15 11:09:25 -07:00
Girish Ramakrishnan
d095899aef add note that admin@fqdn is reserved as well 2016-04-14 13:34:41 -07:00
Johannes Zellner
101ce62ef3 Move username and email lowercasing to where it belongs
Fixes #592
2016-04-14 16:25:48 +02:00
Girish Ramakrishnan
ed78bd05c8 reserve the "admin" username 2016-04-13 16:50:20 -07:00
Girish Ramakrishnan
c24d7e7b3c do not crash on duplicate email 2016-04-13 14:47:35 -07:00
Johannes Zellner
b205212bf2 Explicitly verifyWithUsername() and offer a verify() userId based 2016-04-05 16:27:04 +02:00
Johannes Zellner
3051d4c22a This is actually a callback, doh 2016-04-05 09:28:41 +02:00
Johannes Zellner
b32a0bcfad Do not allow empty username on createOwner() 2016-04-05 09:28:41 +02:00
Johannes Zellner
61c79aab23 Add asserts for user.createOwner() 2016-04-05 09:28:41 +02:00
Johannes Zellner
c73213b2f2 Handle username conflict in account setup 2016-04-05 09:28:41 +02:00
Johannes Zellner
31bd5cdee3 Fix typo, userdb.del() wants an id 2016-04-05 09:28:41 +02:00
Johannes Zellner
65c6806109 Send full user information on deletion, not just the uuid 2016-04-05 09:28:41 +02:00
Johannes Zellner
0b1dcd2940 Use userdb.getByUsername() instead of get() 2016-04-05 09:27:32 +02:00
Johannes Zellner
726d154890 Make user id a uuid.v4() and allow empty usernames 2016-04-05 09:27:32 +02:00
Johannes Zellner
fcfd1dceac Deliver the resetToken when an invite was sent 2016-04-04 18:41:51 +02:00
Johannes Zellner
b1004de358 Notify admins about newly added admin 2016-03-09 06:16:21 +01:00
Johannes Zellner
ecf7575dd3 UserError.NOT_ALLOWED is not unused 2016-02-11 11:32:48 +01:00
Johannes Zellner
98a7f44dc1 Check for last admin not required anymore
This is now prevented by the fact that an admin
cannot remove itself from the admin group. There
remains a race, just like before, where two admins could
trigger an admin group removal of the other admin in parallel
and the calls are in a state after admin flag check of
the used tokens. This can only be prevented with a db constraint
in the end.
2016-02-11 11:30:21 +01:00
Johannes Zellner
163ceef527 Remove the admin toggle route 2016-02-11 11:26:35 +01:00
Girish Ramakrishnan
f413bfb3a0 Add route to set the users groups 2016-02-09 16:43:32 -08:00
girish@cloudron.io
e752949752 make all tests work after group changes 2016-02-09 11:29:32 -08:00
girish@cloudron.io
199eb2b3e1 set the admin flag in user object 2016-02-09 09:25:17 -08:00
Girish Ramakrishnan
49cbea93fb fix ldap test 2016-02-09 08:52:16 -08:00
girish@cloudron.io
451c410547 make user test pass 2016-02-08 21:17:21 -08:00
girish@cloudron.io
f6541720c4 pass owner flag in createUser 2016-02-08 21:05:02 -08:00
girish@cloudron.io
5e5435e869 send email for userAded 2016-02-08 20:51:20 -08:00
girish@cloudron.io
0d4f113d7d add groupIds to user object 2016-02-08 20:38:50 -08:00
girish@cloudron.io
14fab0992f make user test mostly work 2016-02-08 16:53:20 -08:00
girish@cloudron.io
c34f3ee653 null invitor is ok 2016-02-08 16:36:26 -08:00
girish@cloudron.io
52ce59faaf createUser does not take admin anymore 2016-02-08 16:14:43 -08:00
girish@cloudron.io
a47c6f0774 make requires alphabetical 2016-02-08 15:17:54 -08:00
Johannes Zellner
dc83ba2686 Require displayName in updateUser() 2016-01-25 14:26:42 +01:00
Johannes Zellner
1f93787a63 Also send displayName for users 2016-01-25 13:36:51 +01:00
Johannes Zellner
a5ba3faa49 Correctly report password errors 2016-01-20 15:41:29 +01:00
Johannes Zellner
02ba91f1bb Move password generation into separate file and ensure we generate strong passwords 2016-01-20 15:33:11 +01:00
Johannes Zellner
909dd0725a Fix copy and paste error 2016-01-20 14:49:45 +01:00
Johannes Zellner
132ebb4e74 Require strong passwords
Fixes #568
2016-01-20 14:38:41 +01:00
Johannes Zellner
d61698b894 Send user_added email instead of generic user event to admins
Fixes #569
2016-01-20 12:40:56 +01:00
Johannes Zellner
a4d32009ad Make it clear why this if condition is there 2016-01-20 12:39:28 +01:00
girish@cloudron.io
ee705eb979 Add displayName to create user and activate routes 2016-01-19 23:34:49 -08:00
Johannes Zellner
870edab78a Set empty displayName for users 2016-01-19 12:40:50 +01:00
Johannes Zellner
c5b8b0e3db Split up userAdd and sendInvite mailer calls 2016-01-18 16:11:00 +01:00
Johannes Zellner
9258585746 add user.sendInvite() with tests 2016-01-18 15:16:18 +01:00