4d1b587e29
dynsec: Forbid deleting the anon group.
3 years ago
436f0b9348
dynsec: Fix modifyClient and modifyGroup commands
...
They will now not modify the client/group if a new group/client being
added is not valid, or on other failures.
Closes #2598 . Thanks to Sebastian Szczepański.
3 years ago
a4389fc9ce
Fix SPDX identifiers: EDL-1.0 -> BSD-3-Clause.
...
The two licenses are the same.
5 years ago
5927778ae5
Improve logging in dynsec addGroupClient command.
...
Closes #2008 . Thanks to Willem Eradus.
5 years ago
c4f4fae5a0
dynsec: Improve logging in addGroupRole.
...
Close #2005 . Thanks to Willem Eradus.
5 years ago
370cec5edd
Fixes for lots of minor build warnings highlighted by Visual Studio.
5 years ago
7e1a818c54
Fix invalid behaviour in dynsec plugin.
...
This occurred if a group or client was deleted before a role that was
attached to the group or client is deleted.
Closes #1998 . Thanks to Willem Eradus.
5 years ago
791c63372b
Fix cjson include paths.
5 years ago
3731535298
Add SPDX license identifiers.
5 years ago
692fa5537d
dynsec: Reply with error on add role fail.
5 years ago
0605fd402a
dynsec: Command logging.
5 years ago
c303c67461
dynsec: Return group not found on getGroup.
5 years ago
423e1a00d2
dynsec: Tests for group commands with invalid params, plus fixes.
5 years ago
ba8e888e41
dynsec: Refactor some cJSON adding code to reduce redundancy
5 years ago
c1489fc704
dynsec: Refactor duplicate group kick code.
5 years ago
584cf51ba7
Update to EPL-2.0
5 years ago
d1bf2c0d13
dynsec: Fix missing correlationData for getDefaultACLAccess.
5 years ago
7791d882c2
dynsec: Allow empty anonymous group.
5 years ago
5314bae1e2
dynsec: getAnonymousGroup should include correlation data in response.
5 years ago
4f9fe4df4d
dynsec: Rolelist as own file for consistency.
5 years ago
fe436cda95
dynsec: Fix potential grouplist leaks.
5 years ago
20bf6e706e
dynsec: Fix role clientlists not being freed.
5 years ago
67fbe5cc7e
dynsec: Fix some keys being accessed even if they don't exist.
5 years ago
95139cccff
Dynsec: If priority is equal when ordering, use group/role name as well.
5 years ago
801e31efda
Dynsec: Validate user/group/role names as UTF-8.
5 years ago
3486f0e546
Dynsec: Kick affected clients on role change.
5 years ago
bb840ed55b
Conversion fixes.
5 years ago
5b28fac61d
Dynsec: Kick clients on access changes
...
This works in the following circumstances:
* client is deleted
* client is modified
* client has role added
* client has role removed
* group is deleted
* group is modified
* group has role added
* group has role removed
* group has client added
* group has client removed
* anonymous group is changed
The following circumstances are not yet fixed:
* role is deleted
* role is modified
* role has ACL added
* role has ACL removed
5 years ago
30bf47b0d1
Fix printing of ints in dynsec json.
5 years ago
df30b6c9d4
Dynsec: add getAnonymousGroup and getDefaultACLAccess commands
5 years ago
fdff255916
New dynamic security plugin.
5 years ago
Roger A. Light