Commit Graph

65 Commits

Author SHA1 Message Date
Scott Ullrich
dd5bf424c1 Fix XSS issues 2010-11-12 11:36:20 -05:00
Erik Fonnesbeck
2ee080317d Prevent a warning that would appear when modifying privileges of an empty group. 2010-08-18 21:28:49 -06:00
Renato Botelho
ee9933b6e2 Use <?php instead of the short form 2010-08-12 11:15:26 -03:00
jim-p
b0c231e4f3 Don't maintain a membership for the 'all' group when it includes everyone. Just return it for everyone if the 'all' group is requested. For the count of the 'all' group, just return a count of all the users on the system. Fixes #613 2010-07-28 13:53:09 -04:00
jim-p
5709072a7e Only perform this check if the group being created actually has members. 2010-07-19 11:08:58 -04:00
Chris Buechler
0caadd8bb6 fix double click to edit 2010-07-17 18:19:05 -04:00
jim-p
2a0e85128c After editing a group, refresh its users, as their shell privileges may have changed. 2010-07-12 13:20:44 -04:00
Ermal
70d6b5c491 Ticket #612. Correctly show the number of users as 0 on a group with no users. Also handle the case of empty arrays on the xmlparser. 2010-05-24 18:10:50 +00:00
Carlos Eduardo Ramos
2c955e0a29 Fix gettext issues 2010-04-30 09:06:58 -03:00
Vinicius Coque
6e707e7712 Adding gettext() 2010-04-29 16:00:59 -03:00
Renato Botelho
0e94685b3a Fix gettext issues 2010-04-29 14:32:30 -03:00
Carlos Eduardo Ramos
b4fd804b25 Reviewing gettext() 2010-04-28 14:10:55 -03:00
Vinicius Coque
bbf825ab9b Implementing gettext() 2010-04-28 09:32:54 -03:00
Ermal
a69c003681 Ticket #423. Remove priv.inc/priv.defs.inc from files. They used require() instead of required once so produced errors or redefinitions of functions. These includes are now included on authgui.inc. 2010-03-15 19:13:20 +00:00
Chris Buechler
062d7db5ca fix typos 2010-01-16 18:01:52 -05:00
sullrich
3fa86ecd68 Formatting cleanups. Increase buffer size 2009-12-02 22:07:44 -05:00
sullrich
5092a6fbac include priv.inc 2009-11-28 21:15:48 -05:00
sullrich
ead24d63be Include priv.defs.inc 2009-11-28 20:08:13 -05:00
Scott Ullrich
1d333258dc Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on 2009-09-14 21:49:40 -04:00
Scott Ullrich
4d86a13dab Do not show the assigned priveleges area until the item has been saved. Otherwise clicking plus will take you back to the user manager screen which feels beyond broken. 2009-06-30 12:47:19 -04:00
Ermal Lui
0d64af5975 Clear guiconfig from all sort junk functions and put them on the specific pages where they are needed.
Remove some sort functions not used.
2009-06-30 18:16:09 +00:00
Scott Ullrich
33300c73f2 Do not hard code white 2008-10-12 20:22:46 +00:00
Matthew Grooms
e30001cf19 Cleanup the tab format of the system user/group/server management pages.
The edges were square instead of rounded like most pfSense pages. Also
make sure tabs and cancel buttons are present in the add privilege and
add certificate pages.
2008-09-09 06:55:37 +00:00
Matthew Grooms
89c1777a0b Change the text in the privilege table row to read "Assigned Privileges"
instead of "Effective Privileges". This is in contrast to the user page
which also lists group privilege inheritance.
2008-09-03 17:33:58 +00:00
Matthew Grooms
d799787e49 Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this
commit were not being referenced.

This commit also splits out the certificate management components into a
new system menu item.
2008-08-26 04:48:04 +00:00
Matthew Grooms
64cc39d3dd Implement a certificate authority and certificate webui that can be used
to centrally manage this data. There are no consumers at this time. This
interface allow for the following ...

Certificate Authority Manager:
- List certificates authorities
- Import existing certificate authority
- Create internal certificate authority

Certificate Manager:
- List certificates
- Import existing certificate
- Create internal certificate using an internal CA
- Generate certificate signing request for external CAs
- Process certificate signing response from external CAs

Certificate revocation is not currently implemented. The user system will
also be extended to allow for user specific certificate management in a
follow-up commit.
2008-08-09 00:06:08 +00:00
Matthew Grooms
080cda0f91 Add a right arrow icon supplied by hoba. This compliments the existing
left arrow icon. Use the left and right arrow icons instead of the plus
and x icons for moving users and groups between selection lists in the
user and group manager screens.
2008-08-06 21:58:03 +00:00
Matthew Grooms
fbf672cbe9 Add an interface to manage external authentication servers. The two types
supported currently are LDAP and Radius.
2008-08-05 04:16:50 +00:00
Matthew Grooms
659fa7f23b Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named
local_backed has been added that authenticates to the local configuration
info which should be identical to system pwdb credentials. Since the
htpassword file is no longer required, sync_webgui_passwords and its
wrapper function system_password_configure have been removed.

The local account management functions were renamed for consistency. A few
minor bugs related to setting local passwords have also been corrected.
2008-08-03 17:54:35 +00:00
Matthew Grooms
6b07c15ad8 Rewrite the pfsense privilege system with the following goals in mind ...
1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance
5) Cleaning up the related WebUI pages
2008-08-01 06:30:34 +00:00
Matthew Grooms
45ee90edb3 Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions
that were only being used in one place or not at all were removed. The
user page privelege checks were also simplified in preperation for future
work in this area.
2008-07-25 02:28:31 +00:00
Ermal Luçi
3e321df2be Continue interface improvements 2008-06-21 17:38:13 +00:00
Scott Ullrich
687721482e Correctly save pages with . in the ACL. 2008-02-20 18:49:25 +00:00
Scott Ullrich
16a79d6b5c Add cg2 2008-02-20 18:03:43 +00:00
Scott Ullrich
c71c47e322 Remove blank page 2008-02-20 17:49:32 +00:00
Scott Ullrich
b320170df1 Rename Hidden: Exec to Command 2008-02-20 17:46:15 +00:00
Scott Ullrich
02aee0690e Correctly save pages. 2008-02-20 00:31:04 +00:00
Scott Ullrich
889ad280b0 Speed product correctly
Noticed-by: Martin
2008-02-16 22:22:54 +00:00
Scott Ullrich
bb6def3289 s/package/Package/CVS: ---------------------------------------------------------------------- 2008-02-16 21:51:54 +00:00
Scott Ullrich
f7ad13cac6 Add other misc areas. 2008-02-16 21:43:32 +00:00
Scott Ullrich
e706ed8d7a Add other custom pkg.php areas. 2008-02-16 21:35:40 +00:00
Scott Ullrich
ad43fd84eb * Add CARP Settings custom pkg handler 2008-02-16 21:28:36 +00:00
Scott Ullrich
990dc9cecf * Remove blank trailing line
* Allow custom urls that include pkg.php to be saved
2008-02-16 21:26:57 +00:00
Scott Ullrich
31b536532d Add custom priv for granting access to the user manager. 2008-02-16 20:23:35 +00:00
Scott Ullrich
9c9fd51686 Turn Pages Accessible field foreground to white. 2008-02-03 04:39:47 +00:00
Chris Buechler
0f266b2ed4 touch up text
Ticket #1569
2008-01-08 02:29:22 +00:00
Scott Ullrich
36d0358b56 Add product_copyright re-branding support
Add product_copyright_years re-branding support
Add product_website re-branding support
Add product_email re-branding support

Work sponsored-by: Centipede Networks
2007-12-16 20:43:26 +00:00
Scott Ullrich
f469a4ef34 List opt interfaces correctly. 2007-12-03 05:14:58 +00:00
Scott Ullrich
40b56dc18b Add multi user firewall nat port forward capabilities. 2007-12-03 05:02:56 +00:00
Scott Ullrich
d81c2ad144 * Add PPTP, IPSEC and PPPOE * Check for access to firewall interface tabs correctly 2007-12-03 02:08:57 +00:00