Commit Graph

152 Commits

Author SHA1 Message Date
Pierre Jaury 2cb4a44b5a Display fetchmail errors to the user, fixes #23 2016-09-10 13:05:55 +02:00
kaiyou 18253b1dd3 Merge pull request #61 from vhf/admin-creation
Allow admin creation after initial setup
2016-09-09 12:36:02 +02:00
Victor Felder 3976a5b38e Allow admin creation after initial setup 2016-09-09 11:07:05 +02:00
Victor Felder 97d952d7f1 Fix a typo 2016-09-09 11:06:43 +02:00
Pierre Jaury e24da96e58 Add some documentation to access decorators 2016-08-29 20:30:59 +02:00
Pierre Jaury 09bec055fd Fix domain deletion permissions 2016-08-29 20:22:44 +02:00
Pierre Jaury c1f9b61dac Add a simple permission audit script 2016-08-29 20:18:00 +02:00
Pierre Jaury f8dcef22ef Fix the manager deletion behaviour 2016-08-29 19:40:18 +02:00
Pierre Jaury f541a951de Remove obsolete utils module 2016-08-29 19:36:37 +02:00
Pierre Jaury 713318f097 Clean imports and remove calls to the utils module 2016-08-29 19:35:09 +02:00
Pierre Jaury ee9a416696 Implement the decorator-based access control for all views 2016-08-29 19:24:39 +02:00
Pierre Jaury 4e4f2b8037 First shot at improving access control, related to #42
A couple of things are important to note for this commit:
- it only implements the new access control for alias and admin management
- the access control code is located in access.py

The idea behind simpler access control is auditability. There have been a
couple of bugs related to functions not checking permissions properly. If
checking permissions is as simple as decorating a function, exporting the
permission scheme for an audit should be simple.

Also, this still does not address the information leakage related to 404 errors
when an object does not exist, independently of permissions the user has over
the domain.
2016-08-28 15:23:57 +02:00
Pierre Jaury 3ea3bc1d8e Enforce permission checks for admin management 2016-08-27 15:05:30 +02:00
Pierre Jaury 6dc9131b97 Fix the wildcard migration script, fixes #53 2016-08-23 22:46:21 +02:00
Pierre Jaury e3197f9156 Have the admin interface listen on localhost 2016-08-21 15:01:07 +02:00
Pierre Jaury 8601d5b8db Fix #49 when deleting a global admin 2016-08-20 12:46:29 +02:00
Pierre Jaury 0d3c75aa89 Fix a migration issue with wildcard aliases 2016-08-20 12:23:55 +02:00
Pierre Jaury 84769cab3e Switch to form-based confirmations, fixes #20 2016-08-19 10:49:05 +02:00
Pierre Jaury 5a69ada041 Add an action confirmation form, related to #20 2016-08-19 10:36:13 +02:00
Pierre Jaury 58337d7dd6 Set a proper default for spam thresholds 2016-08-18 20:42:55 +02:00
Pierre Jaury 1ce0bf2ef7 Update the user settings view with a slider 2016-08-18 20:42:35 +02:00
Pierre Jaury 0371da6307 Add the migration script for wildcard aliases, related to #38 2016-08-15 22:35:25 +02:00
XYunknown 6d4243ec66 Adding SQL Like format for aliases 2016-08-15 21:01:53 +02:00
Pierre Jaury b3d7b657ab Remove deprecated flask.ext imports 2016-08-13 20:51:54 +02:00
Pierre Jaury 9640d59aca Fix #25, serve static resources locally 2016-08-13 20:39:36 +02:00
Pierre Jaury 689c022a4a Get back to a single forward destination 2016-08-13 20:01:40 +02:00
Pierre Jaury 678a5c8065 Fix #22, use ellipsis for overflowing text 2016-08-11 16:56:50 +02:00
Pierre Jaury c07211677c Fix the default value for comma separated lists 2016-08-11 16:32:50 +02:00
Pierre Jaury 163494cb78 Use readonly attribute instead of disabled 2016-08-11 16:06:52 +02:00
Pierre Jaury 6af7a07e77 Avoid having an empty entry in destionation fields 2016-08-11 15:41:12 +02:00
Pierre Jaury 5581f1b0d9 Related to #19, fix the alias creation page 2016-08-11 14:27:01 +02:00
Pierre Jaury dcaf3e3473 Fix #30, use cascade deletion on domains 2016-08-11 14:13:56 +02:00
Pierre Jaury 49a1281976 Display the alias list properly 2016-08-11 13:52:03 +02:00
Pierre Jaury 5f36e6f4f2 Related to #19, implement domain specific field and database type 2016-08-11 13:33:04 +02:00
Pierre Jaury aace1c2d78 Get back to serving CDN assets, related to #25 2016-06-26 13:48:56 +02:00
Pierre Jaury 1673631e69 Fix the columns in the fetch list 2016-06-26 12:41:25 +02:00
Pierre Jaury f8a220e72a Serve local assets only 2016-06-26 11:18:14 +02:00
Pierre Jaury 21bec865b3 Fix permission management when editing/deleting fetches 2016-06-25 19:48:10 +02:00
Pierre Jaury 58ec3597ab Fix te DKIM DNS example 2016-06-25 19:08:21 +02:00
Pierre Jaury 6a3af51785 Add a confirmation modal when regenerating keys 2016-06-25 16:10:30 +02:00
Pierre Jaury 66a1b50cc9 Sign outgoing emails using DKIM 2016-06-25 16:06:52 +02:00
Pierre Jaury 24680957f7 Handle DKIM key generation and storage 2016-06-25 15:50:05 +02:00
Pierre Jaury 2fa8b879db Display domain SPF and DMARC example entries, fixes #15 2016-06-25 14:51:02 +02:00
Pierre Jaury 1c132fe92e Add migratoin scripts to the docker container 2016-06-25 14:25:53 +02:00
Pierre Jaury 2095b3f189 Fix the admin creation command 2016-06-25 14:25:22 +02:00
Pierre Jaury ec12ee9703 Fix a last typo in the migration script, fixes #17 2016-06-25 14:17:45 +02:00
Pierre Jaury cc013560d9 Perform automatic database migration 2016-06-25 14:11:34 +02:00
Pierre Jaury fa30a71e66 Remove deprecated initdb script 2016-06-25 14:05:04 +02:00
Pierre Jaury cca6eee8db Add the first database revision 2016-06-25 14:04:30 +02:00
Pierre Jaury 014993ee6e Add utility functions to manage.py 2016-06-25 14:02:50 +02:00