1
0
Fork 0

4210 Commits (6d31831cf589de4c52424d89e5ad71fc8476f29d)
 

Autor SHA1 Nachricht Datum
Pierre Jaury f07615c4a4 Do not expose the Web admin interface by default, fixes #40 vor 9 Jahren
Pierre Jaury ec5a75f603 Proxify to webmail only if enabled, related to #40 vor 9 Jahren
kaiyou 18253b1dd3 Merge pull request #61 from vhf/admin-creation
Allow admin creation after initial setup
vor 9 Jahren
kaiyou c1770a1dc1 Merge pull request #62 from vhf/typofix
Fix a typo in the admin UI
vor 9 Jahren
Victor Felder 3976a5b38e Allow admin creation after initial setup vor 9 Jahren
Victor Felder 97d952d7f1 Fix a typo vor 9 Jahren
Pierre Jaury 3f6175c34a Remove deprecated awl settings vor 9 Jahren
Pierre Jaury 382030a7aa Revert to using 'latest' for testing vor 9 Jahren
Pierre Jaury d60ef1991c Add a rainloop Webmail image, fixes #58 vor 9 Jahren
Pierre Jaury f5b9f569ca Add a link to the demo server documentation vor 9 Jahren
kaiyou cbc6bb5dd6 Merge pull request #55 from kaiyou/feat-refactor-permissions
Refactor the access control code
vor 9 Jahren
Pierre Jaury 40b9883c8c Filter outgoing email headers, fixes #52 vor 9 Jahren
Pierre Jaury 92bbfde195 Add a PNG logo for rendering vor 9 Jahren
Pierre Jaury 56e6c7565e Add a draft logo vor 9 Jahren
Pierre Jaury e24da96e58 Add some documentation to access decorators vor 9 Jahren
Pierre Jaury 09bec055fd Fix domain deletion permissions vor 9 Jahren
Pierre Jaury c1f9b61dac Add a simple permission audit script vor 9 Jahren
Pierre Jaury f8dcef22ef Fix the manager deletion behaviour vor 9 Jahren
Pierre Jaury f541a951de Remove obsolete utils module vor 9 Jahren
Pierre Jaury 713318f097 Clean imports and remove calls to the utils module vor 9 Jahren
Pierre Jaury ee9a416696 Implement the decorator-based access control for all views vor 9 Jahren
Pierre Jaury 4e4f2b8037 First shot at improving access control, related to #42
A couple of things are important to note for this commit:
- it only implements the new access control for alias and admin management
- the access control code is located in access.py

The idea behind simpler access control is auditability. There have been a
couple of bugs related to functions not checking permissions properly. If
checking permissions is as simple as decorating a function, exporting the
permission scheme for an audit should be simple.

Also, this still does not address the information leakage related to 404 errors
when an object does not exist, independently of permissions the user has over
the domain.
vor 9 Jahren
Pierre Jaury 3ea3bc1d8e Enforce permission checks for admin management vor 9 Jahren
kaiyou ee6e9b2690 Add a reference to the Freenode IRC channel. vor 9 Jahren
Pierre Jaury 6dc9131b97 Fix the wildcard migration script, fixes #53 vor 9 Jahren
Pierre Jaury 26f7f5a73b Change the env file name in the README file vor 9 Jahren
Pierre Jaury bac20081ee Split the environment file into sections vor 9 Jahren
Pierre Jaury d2d84acd5f Comment all 'build' directives vor 9 Jahren
Pierre Jaury e3197f9156 Have the admin interface listen on localhost vor 9 Jahren
Pierre Jaury 1b6c514dc5 Disable the frontend Web server by default vor 9 Jahren
Pierre Jaury a8eafc508a Default listen on localhost only vor 9 Jahren
Pierre Jaury 7ac44eabeb Add a VERSION variable to avoid modifying the docker-compose file vor 9 Jahren
Pierre Jaury 14ec783ef7 Add a dynamic Webmail option with a 'none' container vor 9 Jahren
Pierre Jaury cf84b82c57 Move the configuration file to .env to support global variables vor 9 Jahren
Pierre Jaury 581a0882af Pull images from Docker Hub by default vor 9 Jahren
Pierre Jaury 8fc95a96d2 Disable debug and set an explicit default secret key vor 9 Jahren
Pierre Jaury ef5d3a77c6 Pull images from Docker Hub by default vor 9 Jahren
Pierre Jaury 8601d5b8db Fix #49 when deleting a global admin vor 9 Jahren
Pierre Jaury 1273571299 Add a changelog vor 9 Jahren
Pierre Jaury 0d3c75aa89 Fix a migration issue with wildcard aliases vor 9 Jahren
Pierre Jaury bfe9ededbc Fix spam filtering when the score is negative vor 9 Jahren
Pierre Jaury 2602ef2883 Add a feature item about freedom vor 9 Jahren
Pierre Jaury e916998bb2 Apply the BetterCrypto nginx configuration, related to #45 vor 9 Jahren
Pierre Jaury 3d1e5523d4 Use a non-starttls configuration for SMTPS port, related to #45 vor 9 Jahren
Pierre Jaury a6ab917aea Do not enforce TLS on the default SMTP port, related to #45 vor 9 Jahren
Pierre Jaury e3e9012183 Add a link to the BetterCrypto reference vor 9 Jahren
Pierre Jaury c0f6a3e387 Apply the BetterCrypto Dovecot configuration, related to #45 vor 9 Jahren
Pierre Jaury 8909033c26 Apply the BetterCrypto Postfix configuration, related to #45 vor 9 Jahren
Pierre Jaury 5a3242d9d3 Apply the BetterCrypto Postfix configuration, related to #45 vor 9 Jahren
Pierre Jaury 5bc0948248 Add some documentation to the Postfix configuration vor 9 Jahren