Commit Graph

66 Commits

Author SHA1 Message Date
Michael Jumper
7d13731ffa GUAC-800: Add attribute-related stubs to JDBC auth. 2015-05-24 15:37:28 -07:00
James Muehlner
13fa327ba4 GUAC-1188 Use canReadPermissions() - do not reimplement permission checks. 2015-05-13 21:50:20 -07:00
Michael Jumper
2c027e9cb2 GUAC-587: Default to localhost:4822 for guacd. Fix absence of SSL support within JDBC auth tunnels. 2015-05-12 13:59:10 -07:00
Michael Jumper
abd3d381f9 GUAC-587: Include and validate Guacamole version in manifest. 2015-05-12 13:40:52 -07:00
Michael Jumper
ae3cb3e81c GUAC-1170: Add missing type parameters. 2015-04-26 18:46:28 -07:00
Michael Jumper
51e9ff77e5 GUAC-1170: Use checked versions of empty list/set/map. 2015-04-26 18:46:27 -07:00
Michael Jumper
b74c05b9f7 GUAC-1170: Add -Werror and -Xlint:all options to Java builds. 2015-04-26 18:46:27 -07:00
Michael Jumper
da468c6ac9 GUAC-1181: Consider null to be empty. 2015-04-25 13:13:08 -07:00
Michael Jumper
4caddb9c29 GUAC-1126: Document that active connection information may be missing. If a user is a non-admin, hide sensitive information about active connections. 2015-04-09 15:38:46 -07:00
Michael Jumper
f8714b735f GUAC-1126: Allow non-admins to see active connections if they have READ permission to those connections. 2015-04-09 15:38:46 -07:00
James Muehlner
c83c34ee7e Merge pull request #121 from glyptodon/active-connection-directory
GUAC-1132: Implement active connection directory.
2015-03-23 16:30:53 -07:00
Michael Jumper
bbae09b51b GUAC-1128: Bump version numbers to 0.9.6 as necessary. 2015-03-23 15:36:00 -07:00
Michael Jumper
e1ae69c159 GUAC-1132: Add permissions for active connections. 2015-03-20 18:24:56 -07:00
Michael Jumper
2179f7b143 GUAC-1132: Move canReadPermissions() into AbstractPermissionService. 2015-03-20 18:24:17 -07:00
Michael Jumper
f9584bb59d GUAC-1132: Split non-database permission service functions into interfaces. 2015-03-20 17:36:54 -07:00
Michael Jumper
ffc29ed398 GUAC-1132: Handle active connections via permissions. Expose via dedicated object - do not rely on calling them tunnels. 2015-03-20 17:17:59 -07:00
Michael Jumper
c2bffcba23 GUAC-1132: Rename DirectoryObject to ModeledDirectoryObject. 2015-03-20 16:35:30 -07:00
Michael Jumper
55fb19c87b GUAC-1132: Extract non-database pieces of DirectoryObjectService into IdentifiableObjectService interface. 2015-03-20 16:19:06 -07:00
Michael Jumper
24a7525ab5 GUAC-1135: Derive remote host from X-Forwarded-For, if present. 2015-03-20 13:10:15 -07:00
Michael Jumper
ea7e88279e GUAC-1132: Allow batch retrieval/deletion of tunnels. 2015-03-19 12:27:28 -07:00
Michael Jumper
c4eea21dee GUAC-1132: Fix typo - it's a tunnel service now. 2015-03-17 16:41:13 -07:00
Michael Jumper
c2192c4138 GUAC-1132: Implement getActiveConnection() on UserContext. 2015-03-17 16:18:31 -07:00
Michael Jumper
cd52b25b94 GUAC-1132: Add support for getRemoteHost() of ConnectionRecord. Store remote host within AuthenticatedUser. 2015-03-17 15:13:32 -07:00
Michael Jumper
5ce0a3a5a4 GUAC-1132: Socket service is now really tunnel service. 2015-03-17 13:31:26 -07:00
Michael Jumper
b33e515895 GUAC-1132: Associate tunnels with records, not sockets. Provide tunnel for connect(). 2015-03-17 13:21:05 -07:00
Michael Jumper
129bb688f4 GUAC-1132: For consistency, rename getActiveSocket() to getSocket(). 2015-03-17 12:27:14 -07:00
Michael Jumper
f9bb25fdb2 GUAC-1132: Associate active socket with connection record. 2015-03-17 12:11:29 -07:00
Michael Jumper
c7827e0e3f GUAC-1132: Implement tracking of all active connections. 2015-03-16 16:32:47 -07:00
Michael Jumper
1e8d68d611 GUAC-1132: Set of active connections should be synchronized. 2015-03-16 16:31:39 -07:00
Michael Jumper
5cf48c7498 GUAC-1132: Add identifier to connection records. 2015-03-16 16:12:10 -07:00
Michael Jumper
3603155f36 GUAC-1132: Modify API to support listing of active connections and host information. 2015-03-16 14:44:10 -07:00
James Muehlner
59d794ef96 GUAC-801 Merge master. 2015-03-10 18:52:03 -07:00
Michael Jumper
f38c246ad0 GUAC-1110: Do not allow connection groups to be updated if doing so would create a cycle. 2015-03-07 22:10:17 -08:00
Michael Jumper
83477e5e75 GUAC-1114: Do not allow users to remove their own system permissions. 2015-03-07 19:24:36 -08:00
Michael Jumper
0ed12dc0eb GUAC-1114: Do not allow users to delete themselves. 2015-03-07 19:15:45 -08:00
Michael Jumper
c6132d2f09 GUAC-1104: Add parent group validation. Switch to beforeCreate/beforeUpdate/beforeDelete validation functions. 2015-03-07 15:25:30 -08:00
Michael Jumper
eb676c8b3f GUAC-1104: Move parent identifier functions to common base objects. 2015-03-07 14:06:27 -08:00
Michael Jumper
4fb2f4e047 GUAC-1103: Allow unsalted passwords from external systems. 2015-03-06 11:02:00 -08:00
James Muehlner
d731d9a404 Merge pull request #103 from glyptodon/group-policy
GUAC-1105: Fix group policies regarding duplicate connections
2015-03-05 18:04:03 -08:00
Michael Jumper
8ae0215e5f GUAC-1113: Require only READ to read another user's permissions. 2015-03-05 17:36:39 -08:00
Michael Jumper
9d6828bf3a GUAC-1105: Reduce code complexity of AbstractGuacamoleSocketService. 2015-03-05 16:36:50 -08:00
Michael Jumper
3166114430 GUAC-1105: Throw GuacamoleClientTooManyException if connection group usage is denied due to duplicate use. 2015-03-05 15:25:42 -08:00
Michael Jumper
3317728658 GUAC-1105: Find first available, least-used seat in multiseat policy. 2015-03-05 15:21:56 -08:00
Michael Jumper
a2b4b62d9f GUAC-1105: Fix balancing policy semantics. 2015-03-05 14:04:34 -08:00
James Muehlner
f513fa6e2e GUAC-801 Created password update dialog on home screen, grant self READ and UPDATE permission to users upon creation, and added sql update script to grant self READ and UPDATE permissions for users in pre-existing databases. 2015-03-04 23:18:16 -08:00
Michael Jumper
a4a3de002b GUAC-1109: Do not rely on SHA2(). Handle password hashing in Java. 2015-03-04 14:23:56 -08:00
Michael Jumper
c9f7bdef0d GUAC-1101: Use SSL if requested. Use provided client information. 2015-03-01 23:43:50 -08:00
Michael Jumper
bc918d3b04 GUAC-1101: Separate configuration and record saving into own functions. 2015-03-01 23:08:16 -08:00
Michael Jumper
feaa2fd63a GUAC-1101: Do not release connections more than once. 2015-03-01 21:52:14 -08:00
Michael Jumper
3f22026c9e GUAC-1101: Implement reserved concurrency policy. 2015-03-01 21:08:01 -08:00