Commit Graph

4009 Commits

Author SHA1 Message Date
Frédéric Péters c3f8fd82a1 manager: make clicks on rows in roles view go to user detail view (#20928) 2017-12-31 10:57:56 +01:00
Frédéric Péters ac7cdb6c54 translation: fix typo 2017-12-30 23:03:22 +01:00
Frédéric Péters cb5cf708bd manager: rely on gadjo for user-info block contents (#20883) 2017-12-25 20:42:07 +01:00
Paul Marillonnet 75d7305b65 successfully-modified email addresses always set as verified (#20563) 2017-12-21 15:55:16 +01:00
Benjamin Dauvergne 8cc3f09cb0 idp_oidc: add token and id_token in the openid_configuration file (fixes #20807) 2017-12-19 15:05:20 +01:00
Frédéric Péters 184dc2523e fix plural form in translation 2017-12-13 17:54:14 +01:00
Benjamin Dauvergne b1d41b96d7 manager: remove All ou choice from ou selector on user's roles view (fixes #20519)
User's roles view is special, the choice all ou modify the UI so that it shows
all roles of the user and only them, whatever their OU but it do not show
all roles from all OUs like on the role listing view. To prevent
misunderstanding from the user on the effect of this choice, we change it
for the empty string as before.
2017-12-13 17:23:18 +01:00
Benjamin Dauvergne e9aa439d87 logging: only filter message which are strings (fixes #20551)
Prevent bug from code logging anything else than a string, typical error:

	logger.exception(e)
2017-12-13 17:23:18 +01:00
Benjamin Dauvergne 97a6ee1650 manager: show a disabled role add link instead of nothing (fixes #20514) 2017-12-13 17:20:03 +01:00
Benjamin Dauvergne 1972076bfd manager: do not use has_any_perm() to get add permission on roles (fixes #20512)
This is a temporary fix, the real fix would be to create a real permission to
manage members of a roles so that role's admin roles would not have the admin
permission but the manage-members permission, so that for an user which can just
manager members of a role, request.user.has_any_perm('a2_rbac.add_role') would
return False, currently it returns True but it has no meaning.
2017-12-13 17:20:03 +01:00
Benjamin Dauvergne 855be9fe04 django_rbac: enlarge Operation.name field (fixes #20549) 2017-12-13 17:20:03 +01:00
Benjamin Dauvergne fe760ead68 manager: show direct link to roles and users in the same OU in breadcrumb (fixes #20524) 2017-12-13 17:20:03 +01:00
Benjamin Dauvergne 0a89e8857b manager: do substring full text search on user's attributes (fixes #20542)
Currently it would only work if the attribute value matched exactly a part of the
search phrase.
2017-12-11 16:43:03 +01:00
Benjamin Dauvergne 57588c4e5d manager: show all role's OUs visible to user (fixes #20511) 2017-12-11 12:59:10 +01:00
Benjamin Dauvergne ed0402e18a manager: hide ou field when there is only one ou (fixes #20248) 2017-12-08 15:12:25 +01:00
Benjamin Dauvergne 02d91ed551 a2_rbac: order organizational units by name only (#20248) 2017-12-08 15:12:25 +01:00
Benjamin Dauvergne 36043475a0 manager: override select styling from jquery-ui in dialogs (fixes #20510) 2017-12-08 15:12:25 +01:00
Benjamin Dauvergne c9206ea1df manager: add field validate_emails in OUEditForm (#19716) 2017-12-08 15:12:25 +01:00
Benjamin Dauvergne 42a6f64958 utils: always encode next_url to ASCII before using it (fixes #20181) 2017-12-08 14:52:14 +01:00
Benjamin Dauvergne 572f59de83 tests: add non-regression test (#20181) 2017-12-08 14:44:51 +01:00
Benjamin Dauvergne d4aded4d73 utils: allow same_domain() to compare None values (fixes #20544) 2017-12-08 14:37:26 +01:00
Benjamin Dauvergne 15878fbfaa manager: add a change email action on users (fixes #19716)
It's only visible for OU with the validate_emails flag.
2017-12-08 13:25:57 +01:00
Benjamin Dauvergne bbb4b9a65a utils: factorize sending of email change verification email (#19716) 2017-12-08 13:25:57 +01:00
Benjamin Dauvergne 25e8ca545a a2_rbac: add a validate_emails flag to OU model (#19716) 2017-12-08 13:25:57 +01:00
Benjamin Dauvergne a9229ea4fd manager: always activate add user link if only one collectivity is possible (fixes #20504) 2017-12-08 10:54:10 +01:00
Benjamin Dauvergne 3db29f986a manager: hide role's ou name when there is only one (fixes #20247) 2017-12-08 10:54:10 +01:00
Benjamin Dauvergne fa30f44baa manager: keep space on the right only for forms in the main content (fixes #20509) 2017-12-08 10:53:36 +01:00
Paul Marillonnet f89c1c4001 translation spelling fix (#20103) 2017-12-08 10:28:09 +01:00
Thomas NOËL dfaefac2fa trivial: typo (#14882) 2017-12-08 10:21:03 +01:00
Benjamin Dauvergne ec4a7435e0 profile_forms: log reset password requests with no user found (fixes #20506) 2017-12-07 18:47:40 +01:00
Benjamin Dauvergne fda076240d profile_forms: strip email before looking for users to reset password (fixes #20505) 2017-12-07 18:47:40 +01:00
Paul Marillonnet cf400b913a ldap_backend: groups to A2 roles mapping (#16523) 2017-12-06 18:58:41 +01:00
Paul Marillonnet 13390a0af3 ldap_backend: remove imprecise role creation capability (#20454) 2017-12-06 17:33:20 +01:00
Benjamin Dauvergne b9d03cfa38 manager: use full width for user's add and edit (fixes #20159) 2017-12-06 11:08:14 +01:00
Benjamin Dauvergne 335bb75d91 debian: run additional settings snippets (fixes #20456) 2017-12-06 11:07:42 +01:00
Benjamin Dauvergne e37bb44e87 profile_forms: apply login-password user filters to the password-reset form (fixes #20455) 2017-12-06 11:07:42 +01:00
Benjamin Dauvergne 645f5b4d54 tests: move test on password-reset functionality (#20455) 2017-12-06 11:07:41 +01:00
Frédéric Péters ef9e9fd32c translation fix 2017-12-04 20:25:15 +01:00
Benjamin Dauvergne d547f33457 forms: only compute seconds_to_wait if there is a username (fixes #20405) 2017-12-04 12:00:20 +01:00
Benjamin Dauvergne 29a101cb40 forms: show real waiting time in authentication form (fixes #20352)
We shorten waiting time by A2_LOGIN_EXPONENTIAL_RETRY_TIMEOUT_MIN_DURATION.
2017-12-01 10:28:20 +01:00
Benjamin Dauvergne 233ef1c83f manager: remove all search forms titles (fixes #20164) 2017-12-01 10:28:20 +01:00
Benjamin Dauvergne 307da1b13e manager: log error when select field is empty due to missing permissions (#20372)
I also simplified usage of logging in this module.
2017-12-01 10:28:20 +01:00
Benjamin Dauvergne b7e525cb07 profile_forms: add setting for random reset of password on reset password requests (fixes #20127) 2017-11-29 08:56:40 +01:00
Benjamin Dauvergne a210f4a838 manager: fix call to manager-delete-user event's hooks (fixes #20339) 2017-11-29 08:55:41 +01:00
Benjamin Dauvergne 84e2ec679e rework use of exponential_retry_timeout by login form (fixes #20323)
- full behaviour is moved in a subclass of
  django.contrib.auth.forms.AuthenticationForm in authentic2.forms
- keys is now built using REMOTE_ADDR and username
- behaviour changed as the countdown is only shown on a POST not just by
  displaying the form (on a GET)
2017-11-28 16:46:27 +01:00
Benjamin Dauvergne 8d6c197d6a tox.ini: force pytest>=3.3.0 remove pytest-catchlog (fixes #20326) 2017-11-28 16:46:27 +01:00
Benjamin Dauvergne 06fdf0f301 update french translations (#19681) 2017-11-27 00:09:34 +01:00
Benjamin Dauvergne 18212ca5dd manager: show generic error message in front of forms if there are field errors (fixes #19681) 2017-11-27 00:07:01 +01:00
Benjamin Dauvergne 8d8dcd00e4 views: add setting to redirect authenticated users to homepage on access to login page (fixes #20257) 2017-11-27 00:07:01 +01:00
Benjamin Dauvergne f11d6fa999 manager: allow setting a site title for the manager (#20242) 2017-11-23 16:48:08 +01:00