allow dots in access paths
[pve-access-control.git] / changelog.Debian
1 libpve-access-control (3.0-9) unstable; urgency=low
2
3 * prevent user enumeration attacks
4
5 * allow dots in access paths
6
7 -- Proxmox Support Team <support@proxmox.com> Mon, 18 Nov 2013 09:06:38 +0100
8
9 libpve-access-control (3.0-8) unstable; urgency=low
10
11 * spice: use lowercase hostname in ticktet signature
12
13 -- Proxmox Support Team <support@proxmox.com> Mon, 28 Oct 2013 08:11:57 +0100
14
15 libpve-access-control (3.0-7) unstable; urgency=low
16
17 * check_volume_access : use parse_volname instead of path, and remove
18 path related code.
19
20 * use warnings instead of global -w flag.
21
22 -- Proxmox Support Team <support@proxmox.com> Tue, 01 Oct 2013 12:35:53 +0200
23
24 libpve-access-control (3.0-6) unstable; urgency=low
25
26 * use shorter spiceproxy tickets
27
28 -- Proxmox Support Team <support@proxmox.com> Fri, 19 Jul 2013 12:39:09 +0200
29
30 libpve-access-control (3.0-5) unstable; urgency=low
31
32 * add code to generate tickets for SPICE
33
34 -- Proxmox Support Team <support@proxmox.com> Wed, 26 Jun 2013 13:08:32 +0200
35
36 libpve-access-control (3.0-4) unstable; urgency=low
37
38 * moved add_vm_to_pool/remove_vm_from_pool from qemu-server
39
40 -- Proxmox Support Team <support@proxmox.com> Tue, 14 May 2013 11:56:54 +0200
41
42 libpve-access-control (3.0-3) unstable; urgency=low
43
44 * Add new role PVETemplateUser (and VM.Clone priviledge)
45
46 -- Proxmox Support Team <support@proxmox.com> Mon, 29 Apr 2013 11:42:15 +0200
47
48 libpve-access-control (3.0-2) unstable; urgency=low
49
50 * remove CGI.pm related code (pveproxy does not need that)
51
52 -- Proxmox Support Team <support@proxmox.com> Mon, 15 Apr 2013 12:34:23 +0200
53
54 libpve-access-control (3.0-1) unstable; urgency=low
55
56 * bump version for wheezy release
57
58 -- Proxmox Support Team <support@proxmox.com> Fri, 15 Mar 2013 08:07:06 +0100
59
60 libpve-access-control (1.0-26) unstable; urgency=low
61
62 * check_volume_access: fix access permissions for backup files
63
64 -- Proxmox Support Team <support@proxmox.com> Thu, 28 Feb 2013 10:00:14 +0100
65
66 libpve-access-control (1.0-25) unstable; urgency=low
67
68 * add VM.Snapshot permission
69
70 -- Proxmox Support Team <support@proxmox.com> Mon, 10 Sep 2012 09:23:32 +0200
71
72 libpve-access-control (1.0-24) unstable; urgency=low
73
74 * untaint path (allow root to restore arbitrary paths)
75
76 -- Proxmox Support Team <support@proxmox.com> Wed, 06 Jun 2012 13:06:34 +0200
77
78 libpve-access-control (1.0-23) unstable; urgency=low
79
80 * correctly compute GUI capabilities (consider pools)
81
82 -- Proxmox Support Team <support@proxmox.com> Wed, 30 May 2012 08:47:23 +0200
83
84 libpve-access-control (1.0-22) unstable; urgency=low
85
86 * new plugin architecture for Auth modules, minor API change for Auth
87 domains (new 'delete' parameter)
88
89 -- Proxmox Support Team <support@proxmox.com> Wed, 16 May 2012 07:21:44 +0200
90
91 libpve-access-control (1.0-21) unstable; urgency=low
92
93 * do not allow user names including slash
94
95 -- Proxmox Support Team <support@proxmox.com> Tue, 24 Apr 2012 10:07:47 +0200
96
97 libpve-access-control (1.0-20) unstable; urgency=low
98
99 * add ability to fork cli workers in background
100
101 -- Proxmox Support Team <support@proxmox.com> Wed, 18 Apr 2012 08:28:20 +0200
102
103 libpve-access-control (1.0-19) unstable; urgency=low
104
105 * return set of privileges on login - can be used to adopt GUI
106
107 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Apr 2012 10:25:10 +0200
108
109 libpve-access-control (1.0-18) unstable; urgency=low
110
111 * fix bug #151: corretly parse username inside ticket
112
113 * fix bug #152: allow user to change his own password
114
115 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Apr 2012 09:40:15 +0200
116
117 libpve-access-control (1.0-17) unstable; urgency=low
118
119 * set propagate flag by default
120
121 -- Proxmox Support Team <support@proxmox.com> Thu, 01 Mar 2012 12:40:19 +0100
122
123 libpve-access-control (1.0-16) unstable; urgency=low
124
125 * add 'pveum passwd' method
126
127 -- Proxmox Support Team <support@proxmox.com> Thu, 23 Feb 2012 12:05:25 +0100
128
129 libpve-access-control (1.0-15) unstable; urgency=low
130
131 * Add VM.Config.CDROM privilege to PVEVMUser rule
132
133 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 11:44:23 +0100
134
135 libpve-access-control (1.0-14) unstable; urgency=low
136
137 * fix buf in userid-param permission check
138
139 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 10:52:35 +0100
140
141 libpve-access-control (1.0-13) unstable; urgency=low
142
143 * allow more characters in ldap base_dn attribute
144
145 -- Proxmox Support Team <support@proxmox.com> Wed, 22 Feb 2012 06:17:02 +0100
146
147 libpve-access-control (1.0-12) unstable; urgency=low
148
149 * allow more characters with realm IDs
150
151 -- Proxmox Support Team <support@proxmox.com> Mon, 20 Feb 2012 08:50:33 +0100
152
153 libpve-access-control (1.0-11) unstable; urgency=low
154
155 * fix bug in exec_api2_perm_check
156
157 -- Proxmox Support Team <support@proxmox.com> Wed, 15 Feb 2012 07:06:30 +0100
158
159 libpve-access-control (1.0-10) unstable; urgency=low
160
161 * fix ACL group name parser
162
163 * changed 'pveum aclmod' command line arguments
164
165 -- Proxmox Support Team <support@proxmox.com> Tue, 14 Feb 2012 12:08:02 +0100
166
167 libpve-access-control (1.0-9) unstable; urgency=low
168
169 * fix bug in check_volume_access (fixes vzrestore)
170
171 -- Proxmox Support Team <support@proxmox.com> Mon, 13 Feb 2012 09:56:37 +0100
172
173 libpve-access-control (1.0-8) unstable; urgency=low
174
175 * fix return value for empty ACL list.
176
177 -- Proxmox Support Team <support@proxmox.com> Fri, 10 Feb 2012 11:25:04 +0100
178
179 libpve-access-control (1.0-7) unstable; urgency=low
180
181 * fix bug #85: allow root@pam to generate tickets for other users
182
183 -- Proxmox Support Team <support@proxmox.com> Tue, 17 Jan 2012 06:40:18 +0100
184
185 libpve-access-control (1.0-6) unstable; urgency=low
186
187 * API change: allow to filter enabled/disabled users.
188
189 -- Proxmox Support Team <support@proxmox.com> Wed, 11 Jan 2012 12:30:37 +0100
190
191 libpve-access-control (1.0-5) unstable; urgency=low
192
193 * add a way to return file changes (diffs): set_result_changes()
194
195 -- Proxmox Support Team <support@proxmox.com> Tue, 20 Dec 2011 11:18:48 +0100
196
197 libpve-access-control (1.0-4) unstable; urgency=low
198
199 * new environment type for ha agents
200
201 -- Proxmox Support Team <support@proxmox.com> Tue, 13 Dec 2011 10:08:53 +0100
202
203 libpve-access-control (1.0-3) unstable; urgency=low
204
205 * add support for delayed parameter parsing - We need that to disable
206 file upload for normal API request (avoid DOS attacs)
207
208 -- Proxmox Support Team <support@proxmox.com> Fri, 02 Dec 2011 09:56:10 +0100
209
210 libpve-access-control (1.0-2) unstable; urgency=low
211
212 * fix bug in fork_worker
213
214 -- Proxmox Support Team <support@proxmox.com> Tue, 11 Oct 2011 08:37:05 +0200
215
216 libpve-access-control (1.0-1) unstable; urgency=low
217
218 * allow '-' in permission paths
219
220 * bump version to 1.0
221
222 -- Proxmox Support Team <support@proxmox.com> Mon, 27 Jun 2011 13:51:48 +0200
223
224 libpve-access-control (0.1) unstable; urgency=low
225
226 * first dummy package - no functionality
227
228 -- Proxmox Support Team <support@proxmox.com> Thu, 09 Jul 2009 16:03:00 +0200
229