Commit Graph

4978 Commits

Author SHA1 Message Date
Michael Jumper
ea142d15ce GUACAMOLE-360: Add convenience function for testing user identity. 2018-10-01 11:46:34 -07:00
Michael Jumper
ad937defa6 GUACAMOLE-360: Update active connection permission check to support user groups. 2018-10-01 11:35:32 -07:00
Nick Couchman
658ce78846 Merge 1.0.0 changes back to master.
Conflicts:
	extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-base/src/main/java/org/apache/guacamole/auth/jdbc/user/RemoteAuthenticatedUser.java
2018-10-01 13:51:56 -04:00
Nick Couchman
828313541b GUACAMOLE-220: Merge add database support for user groups. 2018-10-01 13:38:55 -04:00
Michael Jumper
4d5196207b GUACAMOLE-220: Correct typo - "that status of" should be "the status of". 2018-09-30 23:12:49 -07:00
Michael Jumper
f4ccf8ef62 GUACAMOLE-220: Remove effectively-redundant admin permission check. 2018-09-30 23:11:20 -07:00
Nick Couchman
3ff58129cb Merge 1.0.0 changes back to master. 2018-09-30 08:41:28 -04:00
Nick Couchman
aa7cd9d261 GUACAMOLE-437: Merge remove erroneous non-breaking spaces from source. 2018-09-30 08:40:24 -04:00
Michael Jumper
dee4e89ede GUACAMOLE-437: Remove erroneously-committed, non-breaking spaces (U+00A0) from source. 2018-09-29 15:04:28 -07:00
Nick Couchman
d1a6c297b8 Merge 1.0.0 changes back to master. 2018-09-29 16:50:32 -04:00
Nick Couchman
e861027f53 GUACAMOLE-635: Merge require Java 1.8 for all Java components except guacamoole-common 2018-09-29 16:48:17 -04:00
Michael Jumper
182f204c95 GUACAMOLE-635: Heap pollution is not possible within SimpleDirectory(ObjectType... objects).
From https://docs.oracle.com/javase/tutorial/java/generics/nonReifiableVarargsType.html#vulnerabilities:

"Heap pollution occurs when a variable of a parameterized type refers
to an object that is not of that parameterized type."

In this case, the parameterized type (ObjectType) and the array of that
type within this constructor are always used as their formal types.
2018-09-29 13:19:21 -07:00
Michael Jumper
1fef6a05e1 GUACAMOLE-635: Require Java 1.8 for all Java components except guacamole-common. 2018-09-29 12:56:17 -07:00
Michael Jumper
bb6e8bc1c7 GUACAMOLE-220: Correct documentation of update script.
The UNIQUE constraint is being added once the column is expected to be
unique, not necessarily because it should safely point to entries of a
particular table.
2018-09-27 20:15:23 -07:00
Michael Jumper
7521cdc0ae GUACAMOLE-220: Rows are deleted to modify the one-to-many relationship, not to establish it. 2018-09-27 20:10:32 -07:00
Michael Jumper
5fdd0bb148 GUACAMOLE-220: Remove unnecessary use of multi-result select (use selectOne() instead). 2018-09-27 20:07:24 -07:00
Michael Jumper
a552d88c54 GUACAMOLE-220: Clarify group rename validation logic. 2018-09-27 20:06:18 -07:00
Michael Jumper
fedccebb93 GUACAMOLE-220: Remove unnecessary ModeledUserGroup constructor (equivalent to default constructor). 2018-09-27 20:03:35 -07:00
Michael Jumper
4a5f271702 GUACAMOLE-220: Correct user vs. entity wording in documentation. 2018-09-27 19:45:30 -07:00
Nick Couchman
ef568fb9f1 GUACAMOLE-629: Merge support for argv instruction. 2018-09-26 08:40:48 -04:00
Michael Jumper
75805e4cab GUACAMOLE-629: Add support for creating argument value streams using the "argv" instruction. 2018-09-25 13:01:15 -07:00
Nick Couchman
8a5645e90b GUACAMOLE-622: Merge add parameter definitions for telnet login success, failure, and username regex. 2018-09-21 20:56:15 -04:00
Michael Jumper
af8f5b3a80 GUACAMOLE-622: Add parameter definitions for telnet login success/failure regex. 2018-09-21 17:33:44 -07:00
Nick Couchman
355f76b15e GUACAMOLE-624: Merge include user full name and organization in display and filter. 2018-09-21 20:29:03 -04:00
Michael Jumper
d4a9208c2b GUACAMOLE-624: Include user full name and organization in filtered attributes. 2018-09-21 14:14:57 -07:00
Michael Jumper
660fe82fff GUACAMOLE-624: Add columns displaying user full name and organization. 2018-09-21 14:14:39 -07:00
Michael Jumper
8399b252cd GUACAMOLE-220: Detect cycles within recursive query. SQL Server cannot deal with cycles on its own. 2018-09-19 23:56:53 -07:00
Michael Jumper
ee35620194 GUACAMOLE-220: Update SQL Server mapping with respect to user group support. 2018-09-19 23:56:53 -07:00
Michael Jumper
dec7b3c340 GUACAMOLE-220: Dynamically detect whether the MariaDB / MySQL server supports recursive CTEs. 2018-09-19 23:56:53 -07:00
Michael Jumper
204b6a4b24 GUACAMOLE-220: Update MySQL mapping with respect to user group support. 2018-09-19 23:56:52 -07:00
Michael Jumper
1d0fcc1732 GUACAMOLE-220: Add MySQL and SQL Server versions of user group schema. 2018-09-19 23:56:52 -07:00
Michael Jumper
78d5e3b9d7 GUACAMOLE-220: Manually recurse through the group membership graph if the database engine does not support recursive queries. 2018-09-19 23:56:52 -07:00
Michael Jumper
48948fc245 GUACAMOLE-220: Add missing JDBC-specific USER_GROUP_ATTRIBUTES translation strings. 2018-09-19 23:56:52 -07:00
Michael Jumper
2999c56098 GUACAMOLE-220: Map and allow manipulation of the user group parents of users. 2018-09-19 23:56:52 -07:00
Michael Jumper
856ab44373 GUACAMOLE-220: Map and allow manipulation of the user group parents of user groups. 2018-09-19 23:56:52 -07:00
Michael Jumper
63be247db6 GUACAMOLE-220: Map and allow manipulation of the user group members of user groups. 2018-09-19 23:56:52 -07:00
Michael Jumper
ccd7920b22 GUACAMOLE-220: Map and allow manipulation of the user members of user groups. 2018-09-19 23:56:52 -07:00
Michael Jumper
8f06b7a3f9 GUACAMOLE-220: Define base interfaces for mapping RelatedObjectSets to the database. 2018-09-19 23:56:52 -07:00
Michael Jumper
a39d863797 GUACAMOLE-220: Take group "disabled" flag into account when determining effective groups. Do not inherit from nor apply disabled groups. 2018-09-19 23:56:52 -07:00
Michael Jumper
c5c2984151 GUACAMOLE-220: Map and query user group tables. 2018-09-19 23:56:52 -07:00
Michael Jumper
69f58c8ca3 GUACAMOLE-220: Refactor handling of JDBC permissions to abstract away users vs. user groups. 2018-09-19 23:56:51 -07:00
Michael Jumper
14d10fb42a GUACAMOLE-220: Inherit from groups even if not determined by database. 2018-09-19 23:56:51 -07:00
Michael Jumper
6e71f330b8 GUACAMOLE-220: Move JDBC handling of effective groups to RemoteAuthenticatedUser level. Stub out retrieval of effective groups. 2018-09-19 23:56:51 -07:00
Michael Jumper
a155397947 GUACAMOLE-220: Implement permission inheritance within SQL queries. 2018-09-19 23:56:51 -07:00
Michael Jumper
199f518cdb GUACAMOLE-220: Use effective permissions when deciding whether a user has permission to perform an action. 2018-09-19 23:56:51 -07:00
Michael Jumper
0a69630cbb GUACAMOLE-220: Implement base API changes within database auth allowing for permission inheritance. 2018-09-19 23:56:51 -07:00
Michael Jumper
72bac09f43 GUACAMOLE-220: Add explicit mapper for entities (the basis for users and groups). 2018-09-19 23:56:51 -07:00
Michael Jumper
b499092d06 GUACAMOLE-220: Update SQL queries to use guacamole_entity table where applicable. 2018-09-19 23:56:51 -07:00
Michael Jumper
d95e059612 GUACAMOLE-220: Refactor user-related model objects and services to leverage the base "entity" model. 2018-09-19 23:56:51 -07:00
Michael Jumper
e72f88febf GUACAMOLE-220: Define base schema for user groups. 2018-09-19 23:56:51 -07:00