git.proxmox.com Git - pve-access-control.git/history

]> git.proxmox.com Git - pve-access-control.git/history - src/PVE

projects / pve-access-control.git / history

2024-04-16	Daniel Krambrock...	fix #5335: sort ACL entries in user.cfg	tree \| commitdiff
2024-03-22	Christoph Heiss	jobs: realm sync: fix scheduled LDAP syncs not applying...	tree \| commitdiff
2024-03-19	Wolfgang Bumiller	user: password change: require confirmation-password...	tree \| commitdiff
2024-03-18	Wolfgang Bumiller	return ruid in reauth_user_for_user_modification, add...	tree \| commitdiff
2024-03-18	Wolfgang Bumiller	move/rename root_permission_check to RPCEnvironment	tree \| commitdiff
2024-03-18	Wolfgang Bumiller	tfa: prototype fixup	tree \| commitdiff
2024-02-28	Thomas Lamprecht	add Sys.AccessNetwork privilege	tree \| commitdiff
2024-02-19	Thomas Lamprecht	special roles: code-style improvements for generation...	tree \| commitdiff
2024-02-08	Thomas Lamprecht	LDAP sync: fix-up assembling valid attribute set	tree \| commitdiff
2024-02-08	Gabriel Goller	oidc: enforce generic URI regex for the ACR value	tree \| commitdiff
2024-02-08	Thomas Lamprecht	api: user: limit email to 254 characters and user comme...	tree \| commitdiff
2024-02-08	Fiona Ebner	api: user: limit maximum length for certain properties	tree \| commitdiff
2024-02-08	Thomas Lamprecht	LDAP sync: bail if there is no schema to verify an...	tree \| commitdiff
2024-02-08	Thomas Lamprecht	LDAP sync: build valid-target-attribute list on the...	tree \| commitdiff
2024-02-08	Fiona Ebner	LDAP sync: improve validation of synced attributes	tree \| commitdiff
2024-02-08	Fiona Ebner	api: user: add pattern for user keys option	tree \| commitdiff
2023-12-07	Fabian Grünbichler	build: fix file list	tree \| commitdiff
2023-11-20	Fabian Grünbichler	pools: record parent/subpool information	tree \| commitdiff
2023-11-20	Fabian Grünbichler	fix #1148: allow up to three levels of pool nesting	tree \| commitdiff
2023-11-08	Fabian Grünbichler	acl: add missing SDN ACL paths to allowed list	tree \| commitdiff
2023-11-08	Fabian Grünbichler	perms: fix wrong /pools entry in default set of ACL...	tree \| commitdiff
2023-08-11	Wolfgang Bumiller	fixup comments about config locks	tree \| commitdiff
2023-08-11	Christoph Heiss	ldap: add opt-in `check-connection` param to perform...	tree \| commitdiff
2023-07-21	Christoph Heiss	api: domains: fix setting only the realm authentication...	tree \| commitdiff
2023-07-20	Friedrich Weber	auth: tfa: fail if realm requires TFA but no challenge...	tree \| commitdiff
2023-07-14	Wolfgang Bumiller	add fixme comments about pending pve-rs improvements	tree \| commitdiff
2023-07-14	Friedrich Weber	auth: tfa: read tfa.cfg also if the user.cfg entry...	tree \| commitdiff
2023-06-21	Thomas Lamprecht	drop assert_new_tfa_config_available for Proxmox VE 8	tree \| commitdiff
2023-06-21	Thomas Lamprecht	pveum: list tfa: sort by user ID	tree \| commitdiff
2023-06-21	Thomas Lamprecht	pveum: list tfa: recovery keys have no descriptions	tree \| commitdiff
2023-06-15	Thomas Lamprecht	api: tfa: add missing links for child-routes	tree \| commitdiff
2023-06-15	Thomas Lamprecht	api: tfa: don't block tokens from viewing and list...	tree \| commitdiff
2023-06-14	Thomas Lamprecht	api: users: sort groups	tree \| commitdiff
2023-06-09	Thomas Lamprecht	tfa: cope with native versions in cluster version check	tree \| commitdiff
2023-06-08	Thomas Lamprecht	api: roles: forbid creatin new roles starting with...	tree \| commitdiff
2023-06-08	Thomas Lamprecht	api: roles: cleanup imports	tree \| commitdiff
2023-06-08	Thomas Lamprecht	api: roles: whitespace and indendation clean-ups	tree \| commitdiff
2023-06-07	Dominik Csapak	add privileges and paths for cluster resource mapping	tree \| commitdiff
2023-06-07	Alexandre Derumier	add new SDN.use privilege in PVESDNUser role	tree \| commitdiff
2023-06-07	Fabian Grünbichler	check_sdn_bridge: check bridge first	tree \| commitdiff
2023-06-07	Fabian Grünbichler	check_sdn_bridge: correctly handle noerr	tree \| commitdiff
2023-06-07	Alexandre Derumier	rpcenvironnment: add check_sdn_bridge	tree \| commitdiff
2023-06-07	Alexandre Derumier	access control: add /sdn/zones/<zone>/<vnet>/<vlan...	tree \| commitdiff
2023-06-07	Alexandre Derumier	rpcenv: api permission heuristic: query Sys.Modify...	tree \| commitdiff
2023-06-07	Fabian Grünbichler	acls: restrict less-privileged ACL modifications	tree \| commitdiff
2023-06-07	Fabian Grünbichler	roles: restrict Permissions.Modify to Administrator	tree \| commitdiff
2023-06-07	Thomas Lamprecht	fix module namespace of realm sync API	tree \| commitdiff
2023-06-07	Thomas Lamprecht	api: realm sync: die early if no job options	tree \| commitdiff
2023-06-07	Thomas Lamprecht	api: realm sync: code cleanups	tree \| commitdiff
2023-06-07	Thomas Lamprecht	realm sync: cleanup imports	tree \| commitdiff
2023-06-07	Dominik Csapak	add realm-sync plugin for jobs and CRUD api for realm...	tree \| commitdiff
2023-06-06	Wolfgang Bumiller	api: user index: only include existing tfa lock flags	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	api: include tfa lock status in user list	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	tfa: update list_tfa return schema	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	cli: add 'tfa unlock' command	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	api: add /access/users/<userid>/unlock-tfa api call	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	tfa: enable lockout of users via tfa.cfg	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	pam: set PAM_RHOST	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	cli: add 'tfa list' command	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	drop support for old login API	tree \| commitdiff
2023-06-05	Wolfgang Bumiller	api: drop old verify_tfa api call	tree \| commitdiff
2023-05-21	Thomas Lamprecht	src makefiles: convert to use simple parenthesis	tree \| commitdiff
2023-05-15	Wolfgang Bumiller	use TFA authentication api v2	tree \| commitdiff
2023-04-11	Thomas Lamprecht	fix various perlcritic lints	tree \| commitdiff
2023-03-23	Dominik Csapak	fix #4609: allow valid DN in ldap/ad realm config	tree \| commitdiff
2023-03-20	Christoph Heiss	ldap: Allow quoted values for DN attribute values	tree \| commitdiff
2023-03-08	Dominik Csapak	realm sync: refactor scope/remove-vanished into a stand...	tree \| commitdiff
2023-03-06	Thomas Lamprecht	userid format: clarify that this is the full name@realm...	tree \| commitdiff
2023-03-06	Fabian Grünbichler	fix #4518: improve ACL computation performance	tree \| commitdiff
2022-12-14	Dominik Csapak	realm: sync: allow explicit 'none' for 'remove-vanished...	tree \| commitdiff
2022-11-07	Fabian Grünbichler	privs: add Sys.Incoming	tree \| commitdiff
2022-10-21	Dominik Csapak	authenticate_user: pass undef instead of empty $tfa_cha...	tree \| commitdiff
2022-10-21	Dominik Csapak	authenticate_2nd_new: rename $otp to $tfa_response	tree \| commitdiff
2022-10-21	Dominik Csapak	authenticate_2nd_new: only lock tfa config for recovery...	tree \| commitdiff
2022-08-30	Stoiko Ivanov	auth ldap/ad: compare group member dn case-insensitively	tree \| commitdiff
2022-07-25	Wolfgang Bumiller	tfa: pass whole webauthn config to 'set_webauthn_config'	tree \| commitdiff
2022-07-19	Thomas Lamprecht	api: realm sync: avoid separate log line for "remove...	tree \| commitdiff
2022-07-14	Fabian Grünbichler	auth key: fix double rotation in clusters	tree \| commitdiff
2022-06-23	Mira Limbeck	fix #4074: increase API OpenID code size limit to 2048	tree \| commitdiff
2022-06-20	Fabian Grünbichler	perm check: forbid undefined/empty ACL path	tree \| commitdiff
2022-06-20	Fabian Grünbichler	api2: token: use userid-group as API perm check	tree \| commitdiff
2022-06-03	Thomas Lamprecht	tree wide: typo fixes	tree \| commitdiff
2022-06-03	Fabian Grünbichler	permissions: add some more comments	tree \| commitdiff
2022-06-03	Fabian Grünbichler	permissions: fix token/user priv intersection	tree \| commitdiff
2022-06-03	Fabian Grünbichler	permissions: properly merge propagation flag	tree \| commitdiff
2022-05-31	Thomas Lamprecht	access check: include user/token id in expired exception	tree \| commitdiff
2022-05-31	Thomas Lamprecht	check user: re-order enable check first again and adher...	tree \| commitdiff
2022-05-31	Oguz Bektas	user check: fix expiration/enable order	tree \| commitdiff
2022-04-26	Dominik Csapak	fix #3668: realm-sync: replace 'full' & 'purge' with...	tree \| commitdiff
2022-03-23	Thomas Lamprecht	rpc env: indentation fixes	tree \| commitdiff
2022-03-21	Wolfgang Bumiller	api: get user: declare token schema	tree \| commitdiff
2022-03-21	Fabian Grünbichler	userid-group check: distinguish create and update	tree \| commitdiff
2022-01-21	Fabian Grünbichler	rpcenv->permissions() ensure propagate is always defined	tree \| commitdiff
2022-01-21	Fabian Grünbichler	rpcenv: skip undef propagation flag in more places	tree \| commitdiff
2022-01-21	Fabian Grünbichler	rpcenv: improve user/token intersection	tree \| commitdiff
2022-01-21	Thomas Lamprecht	get effective permissions: return /sdn path too	tree \| commitdiff
2021-12-20	Wolfgang Bumiller	fix realm sync permissions	tree \| commitdiff
2021-12-14	Wolfgang Bumiller	use statement fixup	tree \| commitdiff
2021-12-07	Wolfgang Bumiller	tfa list: account for admin permissions	tree \| commitdiff
2021-12-07	Wolfgang Bumiller	tfa: when modifying others, verify the current user...	tree \| commitdiff
next

Access control framework

RSS Atom