Denis Arh
cfb6bb36d8
More strict checking for ql operators
...
This prevents a couple of SQL injection attacks through QL
2020-12-09 11:12:58 +01:00
Denis Arh
1920331fba
Fix record update with update-denied fields
...
Scenario:
- values already exist on the record
- record is updated with users that can not update all fields
- only values for updatable fields are provided
Access control was moved from generalValueSetValidation to procCreate/procUpdate
to allow return of record value error set.
Existing values from fields with update-deny set are copied to updating set
to ensure proper handling by RVS's Merge fn().
2020-11-26 16:20:40 +01:00
Tomaž Jerman
48a4396417
Fix in-path sink signature matching
...
The eventbus payload contained the trailing
/__sink=..., so path matching failed.
2020-11-26 10:00:36 +01:00
Tomaž Jerman
655eeb9c1a
Fix env tls certificate lapsus
2020-10-01 16:02:28 +02:00
Denis Arh
9c5f5194e4
Force perm refresh on service init
2020-10-01 10:49:17 +02:00
Denis Arh
79b55199a5
Refreshed config for provisioned modules & pages
2020-10-01 10:18:46 +02:00
Denis Arh
66241a12f6
Refreshed static for docs
2020-09-30 20:12:17 +02:00
Denis Arh
85512096d3
Rework mail sending flow & error creating/handling
2020-09-30 15:06:40 +02:00
Denis Arh
c72192ab72
Alter actioslog's caller-skip for logger
2020-09-30 15:06:00 +02:00
Denis Arh
74b15f18b1
Rename service cloud to service solution
2020-09-25 16:32:52 +02:00
Denis Arh
6e799a2ac2
Tweaks for Makefile, make watch dependant on gin
2020-09-24 11:56:21 +02:00
Denis Arh
9915ac2bf8
Remove rule reloading permission initialization
...
Reloading could happen a bit too soon (before or while we're doing the db upgrade)
2020-09-13 11:50:23 +02:00
Tomaž Jerman
b2ccb7efff
Rename service-cloud - service-solution
2020-09-08 10:37:56 +02:00
Denis Arh
c956a18dbf
Fix path to file store
2020-09-03 08:22:06 +02:00
Denis Arh
f4be53a046
Improve healtcheck for mail
2020-09-02 21:45:23 +02:00
Denis Arh
3f1b094cc9
Add SMTP_TSL_INSECURE and SMTP_TSL_SERVER_NAME for better SMTP TSL control
2020-09-02 13:09:41 +02:00
Denis Arh
e1ded02615
Fix default-addr and test-email sending
2020-09-02 12:37:00 +02:00
Denis Arh
d6c9bd08fa
Fix external authentication
...
goth lib was initialized before settings
Fix #107
2020-09-02 12:10:05 +02:00
Denis Arh
04711ce4ad
More robust settings value conversion
...
Fixes #16
2020-08-29 16:47:29 +02:00
Denis Arh
f7b5d27fe2
Add gin (as replacement for realize
2020-08-29 16:11:14 +02:00
Denis Arh
33c6f30a19
Add missing rows.Close() on reporting building
2020-08-29 16:06:26 +02:00
Denis Arh
621cc32033
OpenAPI docs
2020-08-27 21:30:54 +02:00
Denis Arh
587a02562f
Fix & tweak version & build-time info
2020-08-24 15:32:42 +02:00
Denis Arh
25a2f53145
Removing tx from system services
...
Trying a different approach to handle bad-connection (db) issue
2020-08-20 15:43:02 +02:00
Denis Arh
f712e5e352
Add RBAC operation for impersonation
2020-08-12 19:03:06 +02:00
Denis Arh
a57866bcab
Add basic impersonation support for admins
2020-08-12 18:39:28 +02:00
Tomaž Jerman
4d887ba486
Merge branch 'feature-ott-legacy-ref-fix' into develop
2020-08-05 11:47:20 +02:00
Tomaž Jerman
88583e2b73
Reorder user preparation logic
2020-08-05 11:25:44 +02:00
Tomaž Jerman
06f25a87f3
TMP OneTimeTool to add legacy ids to imported records
2020-08-05 11:25:39 +02:00
Tomaž Jerman
e50472ed8b
Allow the importer to use legacy ids for future references
2020-08-04 13:14:09 +02:00
Denis Arh
97a74e30c4
Fix path constraint when signature is in-path
2020-07-24 11:52:04 +02:00
Denis Arh
d6b7157463
Add updated-at to scripts, fix prefix-filtering
2020-07-23 19:06:15 +02:00
Denis Arh
ed0fc88690
Tweaked severity on action log actions
2020-07-22 22:57:18 +02:00
Denis Arh
fafb14860e
Add explicit order-by to prevent mixed results
2020-07-22 22:22:52 +02:00
Denis Arh
520277f82d
Add crude permission checking
2020-07-22 17:30:51 +02:00
Tomaž Jerman
88e4f90cb8
Allow importer to suspend inactive users
2020-07-17 14:02:55 +02:00
Tomaž Jerman
7536d37021
Allow importer to update existing users
2020-07-17 14:02:55 +02:00
Jože Fortun
dec88dcd98
Fix number sanitizer bug
2020-07-17 13:37:11 +02:00
Tomaž Jerman
6fa55771fb
Merge branch 'feature-importer-tweaks' into develop
2020-07-14 13:01:13 +02:00
Tomaž Jerman
11fe268275
Move module fetching to the DB level
2020-07-14 13:00:33 +02:00
Tomaž Jerman
487bdd80f8
Change SF DateTime layout to RFC standard
2020-07-14 13:00:33 +02:00
Tomaž Jerman
573e6082bd
Include value sanitizer on imported data
...
Simplifies the entire process and assures data
consistency.
2020-07-14 13:00:33 +02:00
Tomaž Jerman
d19e305971
Make sys field matching more robust
2020-07-14 13:00:33 +02:00
Tomaž Jerman
305379aeb6
Provide some aditional gval functions
2020-07-14 13:00:33 +02:00
Tomaž Jerman
7ac8479e30
Skip data mapping for missing fields
2020-07-14 13:00:33 +02:00
Tomaž Jerman
6652436852
Skip records with no ID
2020-07-14 13:00:33 +02:00
Denis Arh
af874a53d3
Prevent "context canceled" error for auditlog
2020-07-13 12:34:10 +02:00
Denis Arh
e1a91ee09e
Optimize misc route binding
...
No need to use auth & log middleware in front of misc (debug, healthcheck) routes
2020-07-12 20:04:59 +02:00
Denis Arh
fdc5a364d4
Optimize DB timeout/delay/max-tries
...
Timeout (for connection) should actually be greater or equal to delay
times number of retries otherwise context timesout too soon
2020-07-12 20:04:09 +02:00
Denis Arh
4a33e2b144
Merge branch 'feature-healthcheck' into develop
2020-07-11 13:43:14 +02:00
Denis Arh
Tomaž Jerman
Tomaž Jerman
Jože Fortun