203 Incheckningar (e14f93d4291b96273773ddad457b94efc8f3f387)

Upphovsman SHA1 Meddelande Datum
Pierre Jaury 525089a531 Do not leak information about existing domains or users 9 år sedan
Pierre Jaury 2cb4a44b5a Display fetchmail errors to the user, fixes #23 9 år sedan
kaiyou 18253b1dd3 Merge pull request #61 from vhf/admin-creation
Allow admin creation after initial setup
9 år sedan
Victor Felder 3976a5b38e Allow admin creation after initial setup 9 år sedan
Victor Felder 97d952d7f1 Fix a typo 9 år sedan
Pierre Jaury e24da96e58 Add some documentation to access decorators 9 år sedan
Pierre Jaury 09bec055fd Fix domain deletion permissions 9 år sedan
Pierre Jaury c1f9b61dac Add a simple permission audit script 9 år sedan
Pierre Jaury f8dcef22ef Fix the manager deletion behaviour 9 år sedan
Pierre Jaury f541a951de Remove obsolete utils module 9 år sedan
Pierre Jaury 713318f097 Clean imports and remove calls to the utils module 9 år sedan
Pierre Jaury ee9a416696 Implement the decorator-based access control for all views 9 år sedan
Pierre Jaury 4e4f2b8037 First shot at improving access control, related to #42
A couple of things are important to note for this commit:
- it only implements the new access control for alias and admin management
- the access control code is located in access.py

The idea behind simpler access control is auditability. There have been a
couple of bugs related to functions not checking permissions properly. If
checking permissions is as simple as decorating a function, exporting the
permission scheme for an audit should be simple.

Also, this still does not address the information leakage related to 404 errors
when an object does not exist, independently of permissions the user has over
the domain.
9 år sedan
Pierre Jaury 3ea3bc1d8e Enforce permission checks for admin management 9 år sedan
Pierre Jaury 6dc9131b97 Fix the wildcard migration script, fixes #53 9 år sedan
Pierre Jaury e3197f9156 Have the admin interface listen on localhost 9 år sedan
Pierre Jaury 8601d5b8db Fix #49 when deleting a global admin 9 år sedan
Pierre Jaury 0d3c75aa89 Fix a migration issue with wildcard aliases 9 år sedan
Pierre Jaury 84769cab3e Switch to form-based confirmations, fixes #20 9 år sedan
Pierre Jaury 5a69ada041 Add an action confirmation form, related to #20 9 år sedan
Pierre Jaury 58337d7dd6 Set a proper default for spam thresholds 9 år sedan
Pierre Jaury 1ce0bf2ef7 Update the user settings view with a slider 9 år sedan
Pierre Jaury 0371da6307 Add the migration script for wildcard aliases, related to #38 9 år sedan
XYunknown 6d4243ec66 Adding SQL Like format for aliases 9 år sedan
Pierre Jaury b3d7b657ab Remove deprecated flask.ext imports 9 år sedan
Pierre Jaury 9640d59aca Fix #25, serve static resources locally 9 år sedan
Pierre Jaury 689c022a4a Get back to a single forward destination 9 år sedan
Pierre Jaury 678a5c8065 Fix #22, use ellipsis for overflowing text 9 år sedan
Pierre Jaury c07211677c Fix the default value for comma separated lists 9 år sedan
Pierre Jaury 163494cb78 Use readonly attribute instead of disabled 9 år sedan
Pierre Jaury 6af7a07e77 Avoid having an empty entry in destionation fields 9 år sedan
Pierre Jaury 5581f1b0d9 Related to #19, fix the alias creation page 9 år sedan
Pierre Jaury dcaf3e3473 Fix #30, use cascade deletion on domains 9 år sedan
Pierre Jaury 49a1281976 Display the alias list properly 9 år sedan
Pierre Jaury 5f36e6f4f2 Related to #19, implement domain specific field and database type 9 år sedan
Pierre Jaury aace1c2d78 Get back to serving CDN assets, related to #25 9 år sedan
Pierre Jaury 1673631e69 Fix the columns in the fetch list 9 år sedan
Pierre Jaury f8a220e72a Serve local assets only 9 år sedan
Pierre Jaury 21bec865b3 Fix permission management when editing/deleting fetches 9 år sedan
Pierre Jaury 58ec3597ab Fix te DKIM DNS example 9 år sedan
Pierre Jaury 6a3af51785 Add a confirmation modal when regenerating keys 9 år sedan
Pierre Jaury 66a1b50cc9 Sign outgoing emails using DKIM 9 år sedan
Pierre Jaury 24680957f7 Handle DKIM key generation and storage 9 år sedan
Pierre Jaury 2fa8b879db Display domain SPF and DMARC example entries, fixes #15 9 år sedan
Pierre Jaury 1c132fe92e Add migratoin scripts to the docker container 9 år sedan
Pierre Jaury 2095b3f189 Fix the admin creation command 9 år sedan
Pierre Jaury ec12ee9703 Fix a last typo in the migration script, fixes #17 9 år sedan
Pierre Jaury cc013560d9 Perform automatic database migration 9 år sedan
Pierre Jaury fa30a71e66 Remove deprecated initdb script 9 år sedan
Pierre Jaury cca6eee8db Add the first database revision 9 år sedan
Pierre Jaury 014993ee6e Add utility functions to manage.py 9 år sedan
Pierre Jaury 5d7b3b981d Initialize the migration system 9 år sedan
Pierre Jaury 215ba74275 Remove non-minimized static assets 10 år sedan
Pierre Jaury 4853e54f0b Replace tagsinput with select2 10 år sedan
Pierre Jaury 0668f9abc9 Fix the user create form 10 år sedan
Pierre Jaury 5c1441486b Fix permissions for non-admin users 10 år sedan
Pierre Jaury 7f7ff4d722 Fix #9, do not reuse the flask_login object for updates, query instead 10 år sedan
Pierre Jaury e22f4b29b6 Fix a bug when updating the forward address 10 år sedan
Pierre Jaury 82ec86afd8 Do not always add objects to the session before committing 10 år sedan
Pierre Jaury 9efc798246 Store the state of reply and forward settings being enabled 10 år sedan
Pierre Jaury 493fcf3a58 Use populate_obj to update objects 10 år sedan
Pierre Jaury d3b13c2412 Use SQLAlchemy Session.get instead of filter_by 10 år sedan
Pierre Jaury 3eca6864c3 Rename the generic 'address' to 'email' 10 år sedan
Pierre Jaury 5343a397ff Fix the link to the fetchmail list 10 år sedan
Pierre Jaury f832b74c85 Redirect to the fetch list after creation 10 år sedan
Pierre Jaury 30ecbf81cd First fetchmail implementation 10 år sedan
Pierre Jaury c56a51f7b7 Fix references to the deprecrated admin_of field 10 år sedan
Pierre Jaury 340edc629e Implement admin and manager management 10 år sedan
Pierre Jaury e2faf8e1be Fix the logo link 10 år sedan
Pierre Jaury 5677c85368 Rename /status to /services 10 år sedan
Pierre Jaury 78abe64068 Fix the behavior of the 'enable reply' checkbox 10 år sedan
Pierre Jaury 85a9ae4361 Add a basic service status page 10 år sedan
Pierre Jaury 3a4703b764 Implement auto-forward and auto-reply 10 år sedan
Pierre Jaury 18af763293 Store the full address as a computed field 10 år sedan
Pierre Jaury 8cc2a90ba0 Remove personal TODO file 10 år sedan
Pierre Jaury 96ee0ea45d Use a single domain form 10 år sedan
Pierre Jaury 22c095aef4 Improve the action buttons 10 år sedan
Pierre Jaury ad879bc9f5 Add a confirmation dialog before deleting items 10 år sedan
Pierre Jaury ec0304456b Add fields to enable and/or disable pop and imap 10 år sedan
Pierre Jaury 49b33aba88 Use a single form for both creating and updating aliases 10 år sedan
Pierre Jaury 19707ae3b3 Improve the alias forms 10 år sedan
Pierre Jaury 398e7c1183 Improve forms for user creation an deletion 10 år sedan
Pierre Jaury 77d426e084 Fix some typos 10 år sedan
Pierre Jaury 40d4a22240 Switched to blueprints for the main app 10 år sedan
Pierre Jaury 1c1c8e9cf6 Disable debugging un run.py 10 år sedan
Pierre Jaury 54fb9cf60a Add a global admin account when initializing the database 10 år sedan
Pierre Jaury c52cf53310 Prefill alias forms 10 år sedan
Pierre Jaury 8fb2e58661 Support adding comments to records 10 år sedan
Pierre Jaury 370a2fae4d Support infinite number of aliases and emails 10 år sedan
Pierre Jaury 949df33831 Add create and update date to lists 10 år sedan
Pierre Jaury 99cf0b2031 Prefill domain forms 10 år sedan
Pierre Jaury a5279b7757 Prefill user forms 10 år sedan
Pierre Jaury 6638f656e2 Add some example settings 10 år sedan
Pierre Jaury 6ab580b976 Stop importing views.account 10 år sedan
Pierre Jaury b07158c256 Add the auto-reply feature in the admin panel 10 år sedan
Pierre Jaury 4576e1f5c2 First shot at an AdminLTE dashboard 10 år sedan
Pierre Jaury d0006dc624 Move to Docker Compose and multiple containers 10 år sedan
Pierre Jaury 8e38535710 Initialize the databae properly 10 år sedan
Pierre Jaury 9a8435134b Do not force session commits 10 år sedan
Pierre Jaury 48fbf737ce Actually bind flask-admin to the mail servers 10 år sedan
Pierre Jaury 61c99c7014 Remove the python cache from git 10 år sedan
Pierre Jaury a5ffcfdc90 Setup a basic flask-admin interface 10 år sedan
Pierre Jaury ee0d6391cd Initial commit 10 år sedan