 dflaven
|
8efc46c91e
Fix for Trac#519 - change password bug !
|
13 years ago |
|
dflaven
|
648af437b5
Fixed absolute/relative path issues in the JS and href places
|
13 years ago |
 romainq
|
8b6fec98fb
Setup based on either compiled modules or xml datamodel files (or both).
|
13 years ago |
|
dflaven
|
eff5aff0a6
Added self-registering / user synchronization extensibility
|
13 years ago |
|
dflaven
|
f14d813aac
Make sure that the path/href base is correct to display the page (images, CSS...)
|
13 years ago |
|
dflaven
|
db2209624a
- New way to handle sessions compatible with multiple environments
|
13 years ago |
|
dflaven
|
ac08cc566e
Use the default language when creating a new user from CAS
|
13 years ago |
|
dflaven
|
c07df38add
Support patterns for the definition of casMemberOf groups.
|
13 years ago |
|
dflaven
|
5f089842e6
Automatic synchro of CAS users
|
13 years ago |
|
romainq
|
9e4db3f3b0
#484 Fixed issue with IIS ("Wrong password" at first prompt)
|
13 years ago |
|
dflaven
|
32a4ceba39
More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes
|
13 years ago |
|
romainq
|
8dba345e7d
#446 XSS vector on the login web page
|
13 years ago |
|
dflaven
|
253a2ee596
Fixed Trac#446: XSS vulnerabilities... to be tested !
|
14 years ago |
|
dflaven
|
8c96ea3aa5
CAS authentication improvements:
|
14 years ago |
|
dflaven
|
ec174a7ab8
Use absolute URLs as much as possible to be independent from the page being executed...
|
14 years ago |
|
dflaven
|
8f34f20549
Implemented two new options for CAS:
|
14 years ago |
|
romainq
|
8e56399e7f
#423 Fixed issues with application root URL = f(mode CLI, modules, web server techno, etc.)
|
14 years ago |
|
dflaven
|
17392797af
CAS integration: added support of JA-SIG Central Authentication Service (CAS) with log-off support, using phpCAS API.
|
14 years ago |
|
dflaven
|
15829a9730
First prototype (not yet tested) of CAS integration.
|
14 years ago |
|
dflaven
|
bade681081
Fixed Trac #365: Give the user some feedback when the password was successfully changed/set. Note that iTop does not check that the new password is different from the old one.
|
14 years ago |
|
dflaven
|
37447c1a17
New configuration setting (and new class of Log objects) to keep track of the application's usage: an entry in the log is added each time a user connects to the application. (This feature is disabled by default)
|
14 years ago |
|
dflaven
|
b005b6a3a4
Cosmetics: make the login & change password form look the same on all browsers.
|
14 years ago |
|
dflaven
|
ef13774861
Split the usage of the iTop logo: one logo to be displayed internally (once logged) one externally (login/logoff).
|
14 years ago |
|
romainq
|
e8c6cf5cca
Allow a module to provide a handler to override application settings: OnMetaModelStarted()
|
14 years ago |
|
romainq
|
0b583ed73e
REVIEWED THE FILE INCLUSION POLICY
|
14 years ago |
|
romainq
|
d66cba8756
#286 Issue with HTTPS - reviewed the fix implemented in [896]
|
14 years ago |
|
dflaven
|
00c7bb1af3
Fixed Trac#300: each iTop instance now uses its own name for the cookie storing the session ID. Therefore several instances can coexist independently on the same server.
|
14 years ago |
|
dflaven
|
b00c5af604
Code cleanup: proper usage of the ReadParam function.
|
14 years ago |
|
dflaven
|
a22878ab1e
- Enhancement (Trac#189) first version of a (simple) End-Users portal.
|
14 years ago |
|
romainq
|
ad68b89542
#260 Restrict some pages to administrators
|
14 years ago |
