Commit graph

222 commits

Author SHA1 Message Date
Colin Kuskie
5c4066413c Fix username's in the Edit User screen. Fixes bug # 11950 2010-11-08 08:07:35 -08:00
Colin Kuskie
cb952501fc Prevent password fields from autocompleting, which can overwrite passwords when editing forms. Fixes bug #11923. 2010-10-25 10:29:16 -07:00
Colin Kuskie
7b8f9027a0 Admin cannot be removed from admin group. An admin cannot remove themself from the Admin group. Fixes #11481. 2010-03-22 15:56:39 -07:00
Colin Kuskie
38e6bfad3e Convert many search forms from POST to GET. Fixes bug ##11372 2010-01-25 15:53:49 -08:00
Colin Kuskie
858c148b2e Users always get default profile field values from the profile field. Fixes bug #11215 2009-11-10 10:02:35 -08:00
Graham Knop
60a4a9b140 mark $session->datetime->time as deprecated and remove its use from core code 2009-10-05 20:56:37 -05:00
Colin Kuskie
c7e7b6eed0 remove debug code from CSRF code. 2009-09-22 13:35:16 -07:00
Colin Kuskie
6aa3784636 Fix becomeUser and deleteUser CSRF protected submenu links. 2009-07-14 15:54:03 +00:00
Colin Kuskie
0a3329d7be Reverting 11777 due to lack of docs, upgrade script, and adding new
code during feature freeze.
2009-07-13 20:40:09 +00:00
Colin Kuskie
02e9354c15 Automatically add a token to any autogenerated form.
Refactor previous commits to take advantage of that.
2009-07-06 17:20:27 +00:00
Colin Kuskie
7b343074ef Add missing POD for Operation/User.pm 2009-07-06 03:34:24 +00:00
Paul Driver
f622854a3d Login times in userlist now displaying correctly 2009-05-22 17:52:10 +00:00
Doug Bell
1617e3004f added robustness to user services. added tests 2009-05-15 22:27:36 +00:00
Doug Bell
21452ce58f fixed problem with git svn dcommit... 2009-05-15 18:14:16 +00:00
Doug Bell
75d1856ea7 added services to create, update, and delete users 2009-05-15 18:10:26 +00:00
Doug Bell
1f96d708bf user-services 2009-05-15 18:03:03 +00:00
Doug Bell
18e095faee added services to create, update, and delete users 2009-05-15 18:02:58 +00:00
Colin Kuskie
9fdac9ef8f Implementing rfe 10002, add link to User Manager to view a User's account. 2009-04-16 23:58:54 +00:00
Graham Knop
24da723629 updating copyright year 2009-02-20 23:47:30 +00:00
Colin Kuskie
5381f3038d Forward port graceful handling of the deletion of the Auth LDAPLink. 2008-12-15 22:59:25 +00:00
JT Smith
ef120fb06b Added isVisitor, isAdmin, and isRegistered methods to User object instead
of hard coding checks everywhere with group ids. And updated the code base 
   to match.
2008-09-16 22:32:36 +00:00
Doug Bell
46a6d404bf rfe: Added logged in time to Login History 2008-09-16 18:16:20 +00:00
JT Smith
01d9af6222 The concept of "realtime" workflow has been eliminated. Instead all workflows are now realtime (synchronous), and roll over to be asynchronous if they cannot complete succesfully and immediately. 2008-05-03 05:38:13 +00:00
JT Smith
93b5ca16e4 updating copyright year 2008-02-07 23:28:18 +00:00
JT Smith
fa09c41598 replaced return; with return undef; 2008-01-24 21:58:15 +00:00
Colin Kuskie
c44a5a1bb6 forward porting secondary admin group access privileges when creating users 2007-12-11 21:04:21 +00:00
Colin Kuskie
b6bab1723a internationalize the warning in the Operation/User.pm for not displaying users when there are more than 250 of them 2007-11-05 16:15:04 +00:00
Diona Kidd
7c6ba502c6 If there are over 250 users, none are currently displayed. Added message to user in this case. 2007-11-03 20:38:52 +00:00
JT Smith
0b2b83c34f Change Owner in Security Tab in Assets is not always Working 2007-09-07 15:31:07 +00:00
Graham Knop
cc09762e54 remove delete/become user links from user list after deleting user 2007-08-30 20:28:36 +00:00
Graham Knop
e35ce19e5d fix manage users in group not listing users 2007-08-29 21:17:51 +00:00
JT Smith
d12e676a7f User administration search 2007-08-14 20:35:54 +00:00
JT Smith
e07b63476c - Added a trigger for when a user is created or updated by an admin. 2007-07-29 20:00:02 +00:00
Doug Bell
58ac54b81d add: Ability to specify which group can use individual admin console items 2007-07-26 06:56:38 +00:00
Colin Kuskie
50ef957542 remove help icons from Operation/DatabaseLink 2007-07-23 03:53:59 +00:00
Colin Kuskie
2e23311305 Remove unused tabs from the Help TOC.
Remove setHelp commands and sub-commands from Operation/User.pm.
2007-07-22 05:31:26 +00:00
JT Smith
a7dde82421 updated copyright 2007-07-01 16:09:42 +00:00
Graham Knop
feb82c6d4b fix: image profile field edit errors 2007-06-27 13:07:13 +00:00
Colin Kuskie
21c4fcb75f This patch adds user invitations, a way for existing users on a site
to send an email to their friends and invite them to create an account
on the site.  The feature is enabled or disabled in the site Settings.
(Operation/Settings.pm)

It is implemented as a new operation, Invite (Operation/Invite.pm,
Help/Invite.pm, i18n/English/Invite.pm), and the option is displayed
as an option on the user's account screen. (Operation/Shared.pm).
The form is templated, and lives in the Invite namespace.  Once
the invitation is submitted, if the user's email address is not
already in WebGUI, an email is sent and a record is stored in
the userInvitations table.

When the friend gets the invitation, they are taken to the account
creation screen, which conveniently has their email address already
filled in.  This required changes in the Auth modules (Auth.pm, Auth/*.pm),
and ProfileField.pm.  The latter was so that profile fields can have
their values manually set.  The former changes handle inserting the
email address, bypassing the anonymous registration check, and
updating the record in ther userInvitations table.

I refactored some code out of the AdminConsole for finding the url
back to the site and added it to Session/Url.pm.  The method is
called getBackToSiteUrl.
2007-06-10 16:38:43 +00:00
Doug Bell
07a40788bb add: User profile data table is now a flat table. 2007-05-28 21:35:34 +00:00
Colin Kuskie
0587d28026 fix defined variable problems interfering with session scratch variables in the user search/list operation 2007-04-06 21:48:25 +00:00
Roy Johnson
d4689365c3 don't need this line anymore 2007-01-16 16:08:17 +00:00
Roy Johnson
61adb7d962 fix - xss vulnerability in webgui usernames 2007-01-16 16:06:08 +00:00
Drake
e795f06fd8 Rollback r3340 since it broke specialState:init. 2006-12-06 17:49:22 +00:00
Drake
aa3b8b6d24 Profile field defaulting fixes. 2006-12-06 16:45:52 +00:00
Roy Johnson
dbab2a1a4d fix - Admin Users submenu doesn't fill in uid
Note: this fix was implemented by refactoring the _submenu method to use a properties hash for params and eliminate use of stow.  If any problems crop up with managing users, I would start looking here.  All of my testing indicates everything is working though.
2006-11-07 18:09:47 +00:00
Drake
565119fa1a Multiple changes:
- Shift ProfileField API so that new returns undef on invalid fields.
    This makes it possible for Shortcut::www_saveUserPrefs to execute.
    The class methods in ProfileField are now also actually class methods.

    + Also fix up other modules that created dummy ProfileFields so that
      they don't need to do that anymore, because it's now invalid.

  - Merge contradictory-looking code from Shortcut's view and www_view
    into a reasonable compromise in view, and then have www_view call
    $self->view in a manner similar to that of the default Asset::view.

    + The profile field overrides still don't work, because there's no
      obvious mechanism for "transclude asset in context".  This may
      require some fiddling to get right...
2006-08-31 00:14:56 +00:00
Drake
aac32d24bd Multiple enhancements:
- Perform RFE "js-confirmation-operation/user.pm".
  - Perform RFE "js-confirmation-operation/group.pm".
  - Perform RFE "locked-by-who".
    (Displays in title and alt of img, but not in body text.)
2006-08-29 16:49:25 +00:00
Wouter van Oijen
2d9565775f POD fixes and removing debug output 2006-07-11 09:05:22 +00:00
Roy Johnson
4cb7c98a16 fix - Pagination not working in User Management System 2006-06-28 22:22:00 +00:00