proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-08-02 19:50:28 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 25dd3756f9 bump version to 8.2.2 master Thomas Lamprecht 2025-04-08 13:37:26 +0200
  • 55ab21ecfc openid: fix groups-claim regex Mira Limbeck 2025-04-08 13:33:49 +0200
  • 0727e3f517 bump version to 8.2.1 Thomas Lamprecht 2025-04-04 19:30:24 +0200
  • eea851d5c0 d/control: bump versioned dependency for libpve-rs-perl Thomas Lamprecht 2025-04-04 19:54:49 +0200
  • ef93b299eb api: password: use singular they pronoun Fiona Ebner 2024-12-04 12:37:07 +0100
  • e0e7fc67ae api: clarify that password changes for PAM realm only apply to local node Fiona Ebner 2024-12-04 12:37:06 +0100
  • b10fef56c9 gitignore: add rules for dpkg build artifacts Christoph Heiss 2025-03-25 11:38:33 +0100
  • 6e0d55a587 access: lookup: avoid reading user.cfg from cfs unnecessarily Christoph Heiss 2025-03-25 11:38:32 +0100
  • 1471e1e822 access: lookup: fix undef warning for case-insensitive realms Christoph Heiss 2025-03-25 11:38:31 +0100
  • 97795a0043 fix #4234: add library functions for openid optional userinfo request Thomas Skinner 2025-03-23 22:37:35 -0500
  • e80f840ccc openid: make groups-claim RE more restrictive Fabian Grünbichler 2025-04-04 15:11:07 +0200
  • d9582bb9b8 fix #4411: openid: add logic for openid groups support Thomas Skinner 2025-03-26 20:50:01 -0500
  • 4546c8df48 debian: remove outdated postinst snippet Fiona Ebner 2025-03-12 13:59:06 +0100
  • 44657865a7 api, auth: fix two typos in user-visible description Christoph Heiss 2024-11-22 11:25:29 +0100
  • de84a7894b bump version to 8.2.0 Thomas Lamprecht 2024-11-13 17:41:54 +0100
  • 47b7e66764 api: enforce a minimum length of 8 on new passwords Shannon Sterz 2024-10-04 15:32:05 +0200
  • 84599db265 api: code-style: fix breaking up long schema descriptions Thomas Lamprecht 2024-11-10 20:05:47 +0100
  • b8b2d85fe9 tests: api: add tests for expected output of get permissions endpoint Daniel Kral 2024-11-06 15:48:13 +0100
  • 138ecc60fa api: permissions: allow users to check their own tokens Fabian Grünbichler 2024-11-05 09:30:39 +0100
  • 6287395114 api: permissions: allow users to view their own permissions Fabian Grünbichler 2024-11-05 09:30:38 +0100
  • 37a813d721 pveum: user token: rename remove command to delete with alias Thomas Lamprecht 2024-07-22 18:33:11 +0200
  • 3f73052b19 pveum: indentation clean-up Thomas Lamprecht 2024-07-22 18:32:37 +0200
  • 7d05a239d2 api: ACL update: fix handling of Permissions.Modify Fabian Grünbichler 2024-07-11 13:44:07 +0200
  • 2c74a9abd5 bump version to 8.1.4 Thomas Lamprecht 2024-04-22 13:45:27 +0200
  • cca4c0009e fix #5335: sort ACL entries in user.cfg Daniel Krambrock via pve-devel 2024-04-11 10:09:09 +0200
  • 787e4c06e3 bump version to 8.1.3 Thomas Lamprecht 2024-03-22 14:14:39 +0100
  • bb34ca534e jobs: realm sync: fix scheduled LDAP syncs not applying attributes correctly Christoph Heiss 2024-03-19 14:48:43 +0100
  • 5bcf553e3a user: password change: require confirmation-password parameter Wolfgang Bumiller 2024-03-15 13:41:29 +0100
  • 90faf488db return ruid in reauth_user_for_user_modification, add param name Wolfgang Bumiller 2024-03-15 13:44:27 +0100
  • 060941d467 move/rename root_permission_check to RPCEnvironment Wolfgang Bumiller 2024-03-15 13:40:48 +0100
  • 184a499e8a tfa: prototype fixup Wolfgang Bumiller 2024-03-18 09:20:23 +0100
  • 85f6129773 bump version to 8.1.2 Thomas Lamprecht 2024-02-28 15:42:20 +0100
  • 36c18144de add Sys.AccessNetwork privilege Thomas Lamprecht 2024-02-19 16:25:51 +0100
  • 742a7b6cbd tests: split long expected-permission list over multiple lines Thomas Lamprecht 2024-02-19 15:12:22 +0100
  • 0aa00d13a4 special roles: code-style improvements for generation of special roles Thomas Lamprecht 2024-02-19 14:40:10 +0100
  • f96a4de50d bump version to 7.4.3 stable-7 Thomas Lamprecht 2024-02-08 19:05:13 +0100
  • e537b51081 LDAP sync: fix-up assembling valid attribute set Thomas Lamprecht 2024-02-08 19:03:10 +0100
  • 588927f14a bump version to 8.1.1 Thomas Lamprecht 2024-02-08 19:03:31 +0100
  • 8c3bf4124c LDAP sync: fix-up assembling valid attribute set Thomas Lamprecht 2024-02-08 19:03:10 +0100
  • 2c450c34d4 bump version to 7.4.2 Thomas Lamprecht 2024-02-08 18:53:04 +0100
  • e934e958ad oidc: enforce generic URI regex for the ACR value Gabriel Goller 2024-02-06 11:11:01 +0100
  • 0b2170a191 api: user: limit email to 254 characters and user comment to 2048 Thomas Lamprecht 2024-02-08 17:31:04 +0100
  • 7d72bf7598 api: user: limit maximum length for certain properties Fiona Ebner 2024-02-08 10:45:41 +0100
  • 7389e3c13b LDAP sync: bail if there is no schema to verify an attribute's value Thomas Lamprecht 2024-02-08 13:13:45 +0100
  • 433f6bdf57 LDAP sync: build valid-target-attribute list on the fly to avoid coupling Thomas Lamprecht 2024-02-08 12:10:31 +0100
  • 92ab209ab5 LDAP sync: improve validation of synced attributes Fiona Ebner 2024-02-08 10:45:40 +0100
  • 42476f0f65 api: user: add pattern for user keys option Fiona Ebner 2024-02-08 10:45:39 +0100
  • 6324cbb39c bump version to 8.1.0 Thomas Lamprecht 2024-02-08 17:58:05 +0100
  • b543394c93 oidc: enforce generic URI regex for the ACR value Gabriel Goller 2024-02-06 11:11:01 +0100
  • 744ec31426 api: user: limit email to 254 characters and user comment to 2048 Thomas Lamprecht 2024-02-08 17:31:04 +0100
  • 04712fc464 api: user: limit maximum length for certain properties Fiona Ebner 2024-02-08 10:45:41 +0100
  • 793039db4d LDAP sync: bail if there is no schema to verify an attribute's value Thomas Lamprecht 2024-02-08 13:13:45 +0100
  • 7abb20a1ea LDAP sync: build valid-target-attribute list on the fly to avoid coupling Thomas Lamprecht 2024-02-08 12:10:31 +0100
  • cb93636b55 LDAP sync: improve validation of synced attributes Fiona Ebner 2024-02-08 10:45:40 +0100
  • 2dabf3c3ae api: user: add pattern for user keys option Fiona Ebner 2024-02-08 10:45:39 +0100
  • a53fd5d882 build: fix file list Fabian Grünbichler 2023-12-07 12:36:40 +0100
  • ffc4e503ec bump version to 8.0.7 Wolfgang Bumiller 2023-11-20 12:24:32 +0100
  • 4418b06b35 pools: record parent/subpool information Fabian Grünbichler 2023-11-20 08:22:40 +0100
  • e7224f6e30 fix #1148: allow up to three levels of pool nesting Fabian Grünbichler 2023-11-20 08:22:39 +0100
  • 401e32056e bump version to 8.0.6 Thomas Lamprecht 2023-11-17 08:27:08 +0100
  • 7b5d2abde5 acl: add missing SDN ACL paths to allowed list Fabian Grünbichler 2023-11-08 07:55:17 +0100
  • 3d7afd6f3e perms: fix wrong /pools entry in default set of ACL paths Fabian Grünbichler 2023-11-08 11:29:29 +0100
  • b8a52eac77 bump version to 8.0.5 Wolfgang Bumiller 2023-08-11 13:35:37 +0200
  • d4397b514f fixup comments about config locks Wolfgang Bumiller 2023-08-11 13:30:13 +0200
  • fbb1fa448f ldap: add opt-in check-connection param to perform a bind check Christoph Heiss 2023-08-10 14:37:07 +0200
  • 9ac31bc6d3 bump pve-common dependency to 8.0.8 Wolfgang Bumiller 2023-08-11 13:30:47 +0200
  • 162e68903d api: domains: fix setting only the realm authentication password Christoph Heiss 2023-07-20 16:48:47 +0200
  • 33e4480a77 bump version to 8.0.4 Wolfgang Bumiller 2023-07-20 10:59:56 +0200
  • 032e7d6d44 auth: tfa: fail if realm requires TFA but no challenge is generated Friedrich Weber 2023-07-19 17:38:04 +0200
  • 72950c1d53 add fixme comments about pending pve-rs improvements Wolfgang Bumiller 2023-07-14 14:16:19 +0200
  • 0f3d14d6be auth: tfa: read tfa.cfg also if the user.cfg entry has no "x" marker Friedrich Weber 2023-07-14 13:49:50 +0200
  • 8a856968f7 bump version to 8.0.3 Thomas Lamprecht 2023-06-21 19:45:32 +0200
  • b3edff39f9 drop assert_new_tfa_config_available for Proxmox VE 8 Thomas Lamprecht 2023-06-21 19:43:37 +0200
  • aba03c966e pveum: list tfa: sort by user ID Thomas Lamprecht 2023-06-21 19:41:31 +0200
  • c200d9fd70 pveum: list tfa: recovery keys have no descriptions Thomas Lamprecht 2023-06-21 19:27:41 +0200
  • 1852a92938 bump version to 8.0.2 Thomas Lamprecht 2023-06-21 18:13:58 +0200
  • b7ab634a20 api: tfa: add missing links for child-routes Thomas Lamprecht 2023-06-15 16:55:41 +0200
  • 79c9d3b84b api: tfa: don't block tokens from viewing and list TFA entries Thomas Lamprecht 2023-06-15 09:23:33 +0200
  • 329780350c api: users: sort groups Thomas Lamprecht 2023-06-14 16:07:55 +0200
  • 3f1331f0c5 tfa: cope with native versions in cluster version check Thomas Lamprecht 2023-06-09 16:06:43 +0200
  • ebf82c7781 bump version to 8.0.1 Thomas Lamprecht 2023-06-09 16:12:05 +0200
  • 4a7b5956ec tfa: cope with native versions in cluster version check Thomas Lamprecht 2023-06-09 16:06:43 +0200
  • 97a3696297 bump version to 7.4.1 Fabian Grünbichler 2023-06-09 10:55:03 +0200
  • 5ca12ba097 add new SDN.use privilege in PVESDNUser role Alexandre Derumier 2023-06-06 15:19:25 +0200
  • 3de9b672da access control: add /sdn/zones/<zone>/<vnet>/<vlan> path Alexandre Derumier 2023-06-06 15:19:18 +0200
  • 6004f25eda bump version to 8.0.0 Thomas Lamprecht 2023-06-09 10:14:36 +0200
  • 00b90e7185 api: roles: forbid creatin new roles starting with "PVE" namespace Thomas Lamprecht 2023-06-08 09:31:19 +0200
  • d6fb84bfef api: roles: cleanup imports Thomas Lamprecht 2023-06-08 09:29:25 +0200
  • 43aa2489fc api: roles: whitespace and indendation clean-ups Thomas Lamprecht 2023-06-08 09:22:00 +0200
  • 8e8023b1e9 bump version to 8.0.0~3 Thomas Lamprecht 2023-06-07 19:06:58 +0200
  • bd993a4cfc tests: adapt new test for admin ACL with mapping privs Thomas Lamprecht 2023-06-07 19:12:04 +0200
  • 8b5fd2e66e add privileges and paths for cluster resource mapping Dominik Csapak 2023-06-06 15:52:00 +0200
  • a62d78db33 add new SDN.use privilege in PVESDNUser role Alexandre Derumier 2023-06-06 15:19:25 +0200
  • e1ea58c810 check_sdn_bridge: check bridge first Fabian Grünbichler 2023-06-07 11:34:33 +0200
  • 3c97bee53c check_sdn_bridge: correctly handle noerr Fabian Grünbichler 2023-06-07 11:33:39 +0200
  • a5616d5c6e rpcenvironnment: add check_sdn_bridge Alexandre Derumier 2023-06-06 15:19:24 +0200
  • 4d5b0937a3 access control: add /sdn/zones/<zone>/<vnet>/<vlan> path Alexandre Derumier 2023-06-06 15:19:18 +0200
  • c27eb24526 rpcenv: api permission heuristic: query Sys.Modify for root ACL-path Alexandre Derumier 2023-03-27 12:18:20 +0200
  • 3ef602fe95 bump version to 8.0.0~2 Thomas Lamprecht 2023-06-07 11:34:33 +0200
  • 46bfd59dfc acls: restrict less-privileged ACL modifications Fabian Grünbichler 2023-06-05 16:21:37 +0200