e7399e6926
Add a development run.py script
9 years ago
525089a531
Do not leak information about existing domains or users
9 years ago
2cb4a44b5a
Display fetchmail errors to the user, fixes #23
9 years ago
18253b1dd3
Merge pull request #61 from vhf/admin-creation
...
Allow admin creation after initial setup
9 years ago
3976a5b38e
Allow admin creation after initial setup
9 years ago
97d952d7f1
Fix a typo
9 years ago
e24da96e58
Add some documentation to access decorators
9 years ago
09bec055fd
Fix domain deletion permissions
9 years ago
c1f9b61dac
Add a simple permission audit script
9 years ago
f8dcef22ef
Fix the manager deletion behaviour
9 years ago
f541a951de
Remove obsolete utils module
9 years ago
713318f097
Clean imports and remove calls to the utils module
9 years ago
ee9a416696
Implement the decorator-based access control for all views
9 years ago
4e4f2b8037
First shot at improving access control, related to #42
...
A couple of things are important to note for this commit:
- it only implements the new access control for alias and admin management
- the access control code is located in access.py
The idea behind simpler access control is auditability. There have been a
couple of bugs related to functions not checking permissions properly. If
checking permissions is as simple as decorating a function, exporting the
permission scheme for an audit should be simple.
Also, this still does not address the information leakage related to 404 errors
when an object does not exist, independently of permissions the user has over
the domain.
9 years ago
3ea3bc1d8e
Enforce permission checks for admin management
9 years ago
6dc9131b97
Fix the wildcard migration script, fixes #53
9 years ago
e3197f9156
Have the admin interface listen on localhost
9 years ago
8601d5b8db
Fix #49 when deleting a global admin
9 years ago
0d3c75aa89
Fix a migration issue with wildcard aliases
9 years ago
84769cab3e
Switch to form-based confirmations, fixes #20
9 years ago
5a69ada041
Add an action confirmation form, related to #20
9 years ago
58337d7dd6
Set a proper default for spam thresholds
9 years ago
1ce0bf2ef7
Update the user settings view with a slider
9 years ago
0371da6307
Add the migration script for wildcard aliases, related to #38
9 years ago
6d4243ec66
Adding SQL Like format for aliases
9 years ago
b3d7b657ab
Remove deprecated flask.ext imports
9 years ago
9640d59aca
Fix #25 , serve static resources locally
9 years ago
689c022a4a
Get back to a single forward destination
9 years ago
678a5c8065
Fix #22 , use ellipsis for overflowing text
9 years ago
c07211677c
Fix the default value for comma separated lists
9 years ago
163494cb78
Use readonly attribute instead of disabled
9 years ago
6af7a07e77
Avoid having an empty entry in destionation fields
9 years ago
5581f1b0d9
Related to #19 , fix the alias creation page
9 years ago
dcaf3e3473
Fix #30 , use cascade deletion on domains
9 years ago
49a1281976
Display the alias list properly
9 years ago
5f36e6f4f2
Related to #19 , implement domain specific field and database type
9 years ago
aace1c2d78
Get back to serving CDN assets, related to #25
9 years ago
1673631e69
Fix the columns in the fetch list
9 years ago
f8a220e72a
Serve local assets only
9 years ago
21bec865b3
Fix permission management when editing/deleting fetches
9 years ago
58ec3597ab
Fix te DKIM DNS example
9 years ago
6a3af51785
Add a confirmation modal when regenerating keys
9 years ago
66a1b50cc9
Sign outgoing emails using DKIM
9 years ago
24680957f7
Handle DKIM key generation and storage
9 years ago
2fa8b879db
Display domain SPF and DMARC example entries, fixes #15
9 years ago
1c132fe92e
Add migratoin scripts to the docker container
9 years ago
2095b3f189
Fix the admin creation command
9 years ago
ec12ee9703
Fix a last typo in the migration script, fixes #17
9 years ago
cc013560d9
Perform automatic database migration
9 years ago
fa30a71e66
Remove deprecated initdb script
9 years ago
Pierre Jaury