4e4f2b8037
First shot at improving access control, related to #42
...
A couple of things are important to note for this commit:
- it only implements the new access control for alias and admin management
- the access control code is located in access.py
The idea behind simpler access control is auditability. There have been a
couple of bugs related to functions not checking permissions properly. If
checking permissions is as simple as decorating a function, exporting the
permission scheme for an audit should be simple.
Also, this still does not address the information leakage related to 404 errors
when an object does not exist, independently of permissions the user has over
the domain.
8 years ago
3ea3bc1d8e
Enforce permission checks for admin management
8 years ago
ee6e9b2690
Add a reference to the Freenode IRC channel.
8 years ago
6dc9131b97
Fix the wildcard migration script, fixes #53
8 years ago
26f7f5a73b
Change the env file name in the README file
8 years ago
bac20081ee
Split the environment file into sections
8 years ago
d2d84acd5f
Comment all 'build' directives
8 years ago
e3197f9156
Have the admin interface listen on localhost
8 years ago
1b6c514dc5
Disable the frontend Web server by default
8 years ago
a8eafc508a
Default listen on localhost only
8 years ago
7ac44eabeb
Add a VERSION variable to avoid modifying the docker-compose file
8 years ago
14ec783ef7
Add a dynamic Webmail option with a 'none' container
8 years ago
cf84b82c57
Move the configuration file to .env to support global variables
8 years ago
581a0882af
Pull images from Docker Hub by default
8 years ago
8fc95a96d2
Disable debug and set an explicit default secret key
8 years ago
ef5d3a77c6
Pull images from Docker Hub by default
8 years ago
8601d5b8db
Fix #49 when deleting a global admin
8 years ago
1273571299
Add a changelog
8 years ago
0d3c75aa89
Fix a migration issue with wildcard aliases
8 years ago
bfe9ededbc
Fix spam filtering when the score is negative
8 years ago
2602ef2883
Add a feature item about freedom
8 years ago
e916998bb2
Apply the BetterCrypto nginx configuration, related to #45
8 years ago
3d1e5523d4
Use a non-starttls configuration for SMTPS port, related to #45
8 years ago
a6ab917aea
Do not enforce TLS on the default SMTP port, related to #45
8 years ago
e3e9012183
Add a link to the BetterCrypto reference
8 years ago
c0f6a3e387
Apply the BetterCrypto Dovecot configuration, related to #45
8 years ago
8909033c26
Apply the BetterCrypto Postfix configuration, related to #45
8 years ago
5a3242d9d3
Apply the BetterCrypto Postfix configuration, related to #45
8 years ago
5bc0948248
Add some documentation to the Postfix configuration
8 years ago
207e351276
Merge pull request #43 from d-fens/patch-2
...
Update postfix SSL/TLS configuration
8 years ago
2f9319e454
Merge pull request #44 from d-fens/patch-1
...
Update dovecot SSL/TLS configuration
8 years ago
a3d8daa585
Update postfix SSL/TLS configuration
...
Ensure that RC4 and SSLv3 is not used. This is based off mailinabox project settings, while not the most ideal settings this improves the configuration from what it is currently.
8 years ago
62b1df04a0
Update dovecot SSL/TLS configuration
...
Ensure that RC4 and SSLv3 is not used. This is based off mailinabox project settings, while not the most ideal settings this improves the configuration from what it is currently.
8 years ago
84769cab3e
Switch to form-based confirmations, fixes #20
8 years ago
5a69ada041
Add an action confirmation form, related to #20
8 years ago
6bfdabe8c1
Format the authors file properly
8 years ago
acf4dae72e
Update AUTHORS.md
8 years ago
bd94d24a1f
Put a link to the Github contributors list
8 years ago
dfb1c19441
Fix a typo in the author list
8 years ago
01fc0863b1
Add an authors file
8 years ago
23f414e672
Update the license file
8 years ago
58337d7dd6
Set a proper default for spam thresholds
8 years ago
1ce0bf2ef7
Update the user settings view with a slider
8 years ago
76c33df91f
Flatten sieve imports
8 years ago
93f33e956d
Filter spam before forward and auto-reply
8 years ago
daf8c4bad3
Honor per-user spam settings, fixes #21
8 years ago
2a3f62fc65
Disable rmilter configuration overrides for now
8 years ago
7d612793de
Fix indentation in the rmilter configuration
8 years ago
8ab1134477
Remove shipped antispam plugin binary, related to #33
8 years ago
82bc2a0fdd
Implement Rmilter configuration overrides, fixes #29
8 years ago
Pierre Jaury