Commit Graph

3974 Commits

Author SHA1 Message Date
Benjamin Dauvergne 61e9b064f4 attribute_kinds: add a birthdate field kind (fixes #21691)
Similar to date, it just checks that the given date is in the past.
2018-02-07 16:25:04 +01:00
Benjamin Dauvergne 38bb35c856 auth_oidc: log token revocation at the INFO level to make test pass (fixes #21610)
In pytest>=3.4.0 the caplog does not capture all log levels but follow the
default logging configuration. As this event was looked by the test and
the information is usefull, the best fix is to raise the log level and
to not modify the test.
2018-02-07 15:46:46 +01:00
Benjamin Dauvergne ac6f1ad28a declare form.media in registration/registration_completion_form.html (fixes #21690)
Without it using for example a date field will not use the Bootstrap datetimepicker
widget on the self edit view.
2018-02-07 15:42:41 +01:00
Benjamin Dauvergne 5c8eb8b6c3 declare form.media in authentic2/accounts_edit.html (fixes #20600)
Without it using for example a date field will not use the Bootstrap datetimepicker
widget on the self edit view.
2018-02-07 15:42:41 +01:00
Frédéric Péters 7c2b5f3fcb tox: limit to pytest < 3.4 for now (#21610) 2018-02-02 13:28:04 +01:00
Frédéric Péters 9201de6740 manager: remove broken export to HTML (#21197)
It doesn't work with the tablib versions currently in use.
2018-02-02 12:01:36 +01:00
Josue Kouka bafb9dceb1 idp oidc: log invalid request's response error (#19837) 2018-01-24 16:48:08 +01:00
Frédéric Péters fe64b1edef translation update 2018-01-24 12:14:25 +01:00
Josue Kouka edd9e8965d misc: remove useless comma in authorization template (#21187) 2018-01-22 14:08:31 +01:00
Christophe de Vienne d639f7755b idp_oidc: add a client and global setting for the idtoken duration (fixes #21232)
The default expire duration is still 30 seconds and can be changed
with the IDTOKEN_DURATION app setting.
The duration can be customized for each client with the new 'idtoken_duration'
field.

License: MIT
2018-01-19 13:59:31 +01:00
Frédéric Péters c2e2293d4f oidc: fix minor errors in translation (#21186) 2018-01-16 22:59:08 +01:00
Frédéric Péters acc2b3d2ba manage: never allow sorting by "via" (#21210) 2018-01-16 22:59:08 +01:00
Paul Marillonnet fd6f2ac2ef fix syntax error in the local_settings example file (#21140) 2018-01-12 11:29:56 +01:00
Frédéric Péters 7642c043a8 manager: use gadjo template for pagination (#14939) 2017-12-31 10:57:56 +01:00
Frédéric Péters 619cd6676b manager: mark Delete button with dedicated CSS class (#20929) 2017-12-31 10:57:56 +01:00
Frédéric Péters c3f8fd82a1 manager: make clicks on rows in roles view go to user detail view (#20928) 2017-12-31 10:57:56 +01:00
Frédéric Péters ac7cdb6c54 translation: fix typo 2017-12-30 23:03:22 +01:00
Frédéric Péters cb5cf708bd manager: rely on gadjo for user-info block contents (#20883) 2017-12-25 20:42:07 +01:00
Paul Marillonnet 75d7305b65 successfully-modified email addresses always set as verified (#20563) 2017-12-21 15:55:16 +01:00
Benjamin Dauvergne 8cc3f09cb0 idp_oidc: add token and id_token in the openid_configuration file (fixes #20807) 2017-12-19 15:05:20 +01:00
Frédéric Péters 184dc2523e fix plural form in translation 2017-12-13 17:54:14 +01:00
Benjamin Dauvergne b1d41b96d7 manager: remove All ou choice from ou selector on user's roles view (fixes #20519)
User's roles view is special, the choice all ou modify the UI so that it shows
all roles of the user and only them, whatever their OU but it do not show
all roles from all OUs like on the role listing view. To prevent
misunderstanding from the user on the effect of this choice, we change it
for the empty string as before.
2017-12-13 17:23:18 +01:00
Benjamin Dauvergne e9aa439d87 logging: only filter message which are strings (fixes #20551)
Prevent bug from code logging anything else than a string, typical error:

	logger.exception(e)
2017-12-13 17:23:18 +01:00
Benjamin Dauvergne 97a6ee1650 manager: show a disabled role add link instead of nothing (fixes #20514) 2017-12-13 17:20:03 +01:00
Benjamin Dauvergne 1972076bfd manager: do not use has_any_perm() to get add permission on roles (fixes #20512)
This is a temporary fix, the real fix would be to create a real permission to
manage members of a roles so that role's admin roles would not have the admin
permission but the manage-members permission, so that for an user which can just
manager members of a role, request.user.has_any_perm('a2_rbac.add_role') would
return False, currently it returns True but it has no meaning.
2017-12-13 17:20:03 +01:00
Benjamin Dauvergne 855be9fe04 django_rbac: enlarge Operation.name field (fixes #20549) 2017-12-13 17:20:03 +01:00
Benjamin Dauvergne fe760ead68 manager: show direct link to roles and users in the same OU in breadcrumb (fixes #20524) 2017-12-13 17:20:03 +01:00
Benjamin Dauvergne 0a89e8857b manager: do substring full text search on user's attributes (fixes #20542)
Currently it would only work if the attribute value matched exactly a part of the
search phrase.
2017-12-11 16:43:03 +01:00
Benjamin Dauvergne 57588c4e5d manager: show all role's OUs visible to user (fixes #20511) 2017-12-11 12:59:10 +01:00
Benjamin Dauvergne ed0402e18a manager: hide ou field when there is only one ou (fixes #20248) 2017-12-08 15:12:25 +01:00
Benjamin Dauvergne 02d91ed551 a2_rbac: order organizational units by name only (#20248) 2017-12-08 15:12:25 +01:00
Benjamin Dauvergne 36043475a0 manager: override select styling from jquery-ui in dialogs (fixes #20510) 2017-12-08 15:12:25 +01:00
Benjamin Dauvergne c9206ea1df manager: add field validate_emails in OUEditForm (#19716) 2017-12-08 15:12:25 +01:00
Benjamin Dauvergne 42a6f64958 utils: always encode next_url to ASCII before using it (fixes #20181) 2017-12-08 14:52:14 +01:00
Benjamin Dauvergne 572f59de83 tests: add non-regression test (#20181) 2017-12-08 14:44:51 +01:00
Benjamin Dauvergne d4aded4d73 utils: allow same_domain() to compare None values (fixes #20544) 2017-12-08 14:37:26 +01:00
Benjamin Dauvergne 15878fbfaa manager: add a change email action on users (fixes #19716)
It's only visible for OU with the validate_emails flag.
2017-12-08 13:25:57 +01:00
Benjamin Dauvergne bbb4b9a65a utils: factorize sending of email change verification email (#19716) 2017-12-08 13:25:57 +01:00
Benjamin Dauvergne 25e8ca545a a2_rbac: add a validate_emails flag to OU model (#19716) 2017-12-08 13:25:57 +01:00
Benjamin Dauvergne a9229ea4fd manager: always activate add user link if only one collectivity is possible (fixes #20504) 2017-12-08 10:54:10 +01:00
Benjamin Dauvergne 3db29f986a manager: hide role's ou name when there is only one (fixes #20247) 2017-12-08 10:54:10 +01:00
Benjamin Dauvergne fa30f44baa manager: keep space on the right only for forms in the main content (fixes #20509) 2017-12-08 10:53:36 +01:00
Paul Marillonnet f89c1c4001 translation spelling fix (#20103) 2017-12-08 10:28:09 +01:00
Thomas NOËL dfaefac2fa trivial: typo (#14882) 2017-12-08 10:21:03 +01:00
Benjamin Dauvergne ec4a7435e0 profile_forms: log reset password requests with no user found (fixes #20506) 2017-12-07 18:47:40 +01:00
Benjamin Dauvergne fda076240d profile_forms: strip email before looking for users to reset password (fixes #20505) 2017-12-07 18:47:40 +01:00
Paul Marillonnet cf400b913a ldap_backend: groups to A2 roles mapping (#16523) 2017-12-06 18:58:41 +01:00
Paul Marillonnet 13390a0af3 ldap_backend: remove imprecise role creation capability (#20454) 2017-12-06 17:33:20 +01:00
Benjamin Dauvergne b9d03cfa38 manager: use full width for user's add and edit (fixes #20159) 2017-12-06 11:08:14 +01:00
Benjamin Dauvergne 335bb75d91 debian: run additional settings snippets (fixes #20456) 2017-12-06 11:07:42 +01:00