Commit Graph

320 Commits

Author SHA1 Message Date
Michael Jumper
4caddb9c29 GUAC-1126: Document that active connection information may be missing. If a user is a non-admin, hide sensitive information about active connections. 2015-04-09 15:38:46 -07:00
Michael Jumper
f8714b735f GUAC-1126: Allow non-admins to see active connections if they have READ permission to those connections. 2015-04-09 15:38:46 -07:00
Michael Jumper
41b71d4d08 GUAC-800: Fix deletion of user permissions through PostgreSQL. 2015-04-08 14:46:05 -07:00
James Muehlner
c83c34ee7e Merge pull request #121 from glyptodon/active-connection-directory
GUAC-1132: Implement active connection directory.
2015-03-23 16:30:53 -07:00
Michael Jumper
bbae09b51b GUAC-1128: Bump version numbers to 0.9.6 as necessary. 2015-03-23 15:36:00 -07:00
Michael Jumper
e1ae69c159 GUAC-1132: Add permissions for active connections. 2015-03-20 18:24:56 -07:00
Michael Jumper
2179f7b143 GUAC-1132: Move canReadPermissions() into AbstractPermissionService. 2015-03-20 18:24:17 -07:00
Michael Jumper
f9584bb59d GUAC-1132: Split non-database permission service functions into interfaces. 2015-03-20 17:36:54 -07:00
Michael Jumper
ffc29ed398 GUAC-1132: Handle active connections via permissions. Expose via dedicated object - do not rely on calling them tunnels. 2015-03-20 17:17:59 -07:00
Michael Jumper
c2bffcba23 GUAC-1132: Rename DirectoryObject to ModeledDirectoryObject. 2015-03-20 16:35:30 -07:00
Michael Jumper
55fb19c87b GUAC-1132: Extract non-database pieces of DirectoryObjectService into IdentifiableObjectService interface. 2015-03-20 16:19:06 -07:00
Michael Jumper
24a7525ab5 GUAC-1135: Derive remote host from X-Forwarded-For, if present. 2015-03-20 13:10:15 -07:00
Michael Jumper
ea7e88279e GUAC-1132: Allow batch retrieval/deletion of tunnels. 2015-03-19 12:27:28 -07:00
Michael Jumper
c4eea21dee GUAC-1132: Fix typo - it's a tunnel service now. 2015-03-17 16:41:13 -07:00
Michael Jumper
c2192c4138 GUAC-1132: Implement getActiveConnection() on UserContext. 2015-03-17 16:18:31 -07:00
Michael Jumper
cd52b25b94 GUAC-1132: Add support for getRemoteHost() of ConnectionRecord. Store remote host within AuthenticatedUser. 2015-03-17 15:13:32 -07:00
Michael Jumper
5ce0a3a5a4 GUAC-1132: Socket service is now really tunnel service. 2015-03-17 13:31:26 -07:00
Michael Jumper
b33e515895 GUAC-1132: Associate tunnels with records, not sockets. Provide tunnel for connect(). 2015-03-17 13:21:05 -07:00
Michael Jumper
129bb688f4 GUAC-1132: For consistency, rename getActiveSocket() to getSocket(). 2015-03-17 12:27:14 -07:00
Michael Jumper
f9bb25fdb2 GUAC-1132: Associate active socket with connection record. 2015-03-17 12:11:29 -07:00
Michael Jumper
c7827e0e3f GUAC-1132: Implement tracking of all active connections. 2015-03-16 16:32:47 -07:00
Michael Jumper
1e8d68d611 GUAC-1132: Set of active connections should be synchronized. 2015-03-16 16:31:39 -07:00
Michael Jumper
5cf48c7498 GUAC-1132: Add identifier to connection records. 2015-03-16 16:12:10 -07:00
Michael Jumper
3603155f36 GUAC-1132: Modify API to support listing of active connections and host information. 2015-03-16 14:44:10 -07:00
James Muehlner
59d794ef96 GUAC-801 Merge master. 2015-03-10 18:52:03 -07:00
Michael Jumper
f38c246ad0 GUAC-1110: Do not allow connection groups to be updated if doing so would create a cycle. 2015-03-07 22:10:17 -08:00
Michael Jumper
83477e5e75 GUAC-1114: Do not allow users to remove their own system permissions. 2015-03-07 19:24:36 -08:00
Michael Jumper
0ed12dc0eb GUAC-1114: Do not allow users to delete themselves. 2015-03-07 19:15:45 -08:00
Michael Jumper
45b31064c0 GUAC-1103: Add missing explicit typecast. 2015-03-07 19:01:16 -08:00
Michael Jumper
c6132d2f09 GUAC-1104: Add parent group validation. Switch to beforeCreate/beforeUpdate/beforeDelete validation functions. 2015-03-07 15:25:30 -08:00
Michael Jumper
eb676c8b3f GUAC-1104: Move parent identifier functions to common base objects. 2015-03-07 14:06:27 -08:00
Michael Jumper
40bdfb57b3 GUAC-1103: Update README to include PostgresQL. 2015-03-06 13:14:33 -08:00
Michael Jumper
ee3d8f77c2 GUAC-1103: Add missing typecase for connection group type. 2015-03-06 13:03:41 -08:00
Michael Jumper
db6a9f07a3 GUAC-1103: Fix case of user READ permission. 2015-03-06 12:50:33 -08:00
Michael Jumper
8f557ed338 GUAC-1103: Fix guacadmin user creation script. Must not insert IDs directly into serial columns - doing so clashes with the sequence resulting in PK failures upon insert. 2015-03-06 12:48:12 -08:00
Michael Jumper
4fb2f4e047 GUAC-1103: Allow unsalted passwords from external systems. 2015-03-06 11:02:00 -08:00
Michael Jumper
187f61b483 GUAC-1103: Explicitly cast strings to integers. 2015-03-06 11:02:00 -08:00
Michael Jumper
dbab6acd2c GUAC-1103: No INSERT IGNORE in postgres. 2015-03-06 11:02:00 -08:00
Michael Jumper
233c12b2a1 GUAC-1103: Add PostgreSQL to .tar.gz assembly. 2015-03-06 11:02:00 -08:00
Michael Jumper
4a0213397b GUAC-1103: Convert string identifiers to integer where known to be integers. 2015-03-06 11:01:59 -08:00
Michael Jumper
06a7ab4cec GUAC-1103: Explicitly cast permission types. 2015-03-06 11:01:59 -08:00
Michael Jumper
4e08c10f94 GUAC-1103: Translate copied MySQL schema to PostgreSQL. 2015-03-06 11:01:59 -08:00
Michael Jumper
15240cc7b1 GUAC-1103: Add stubbed PostgreSQL authentication by copying the MySQL auth. Has not yet been tested against an actual DB nor the PostgreSQL JDBC driver. 2015-03-06 11:01:52 -08:00
James Muehlner
d731d9a404 Merge pull request #103 from glyptodon/group-policy
GUAC-1105: Fix group policies regarding duplicate connections
2015-03-05 18:04:03 -08:00
Michael Jumper
8ae0215e5f GUAC-1113: Require only READ to read another user's permissions. 2015-03-05 17:36:39 -08:00
Michael Jumper
9d6828bf3a GUAC-1105: Reduce code complexity of AbstractGuacamoleSocketService. 2015-03-05 16:36:50 -08:00
Michael Jumper
3166114430 GUAC-1105: Throw GuacamoleClientTooManyException if connection group usage is denied due to duplicate use. 2015-03-05 15:25:42 -08:00
Michael Jumper
3317728658 GUAC-1105: Find first available, least-used seat in multiseat policy. 2015-03-05 15:21:56 -08:00
Michael Jumper
a2b4b62d9f GUAC-1105: Fix balancing policy semantics. 2015-03-05 14:04:34 -08:00
James Muehlner
f513fa6e2e GUAC-801 Created password update dialog on home screen, grant self READ and UPDATE permission to users upon creation, and added sql update script to grant self READ and UPDATE permissions for users in pre-existing databases. 2015-03-04 23:18:16 -08:00