Commit Graph
58 Commits
Author SHA1 Message Date
Michael Jumper 4caddb9c29 GUAC-1126: Document that active connection information may be missing. If a user is a non-admin, hide sensitive information about active connections. 2015-04-09 15:38:46 -07:00
Michael Jumper f8714b735f GUAC-1126: Allow non-admins to see active connections if they have READ permission to those connections. 2015-04-09 15:38:46 -07:00
James Muehlner c83c34ee7e Merge pull request #121 from glyptodon/active-connection-directory
GUAC-1132: Implement active connection directory.
2015-03-23 16:30:53 -07:00
Michael Jumper bbae09b51b GUAC-1128: Bump version numbers to 0.9.6 as necessary. 2015-03-23 15:36:00 -07:00
Michael Jumper e1ae69c159 GUAC-1132: Add permissions for active connections. 2015-03-20 18:24:56 -07:00
Michael Jumper 2179f7b143 GUAC-1132: Move canReadPermissions() into AbstractPermissionService. 2015-03-20 18:24:17 -07:00
Michael Jumper f9584bb59d GUAC-1132: Split non-database permission service functions into interfaces. 2015-03-20 17:36:54 -07:00
Michael Jumper ffc29ed398 GUAC-1132: Handle active connections via permissions. Expose via dedicated object - do not rely on calling them tunnels. 2015-03-20 17:17:59 -07:00
Michael Jumper c2bffcba23 GUAC-1132: Rename DirectoryObject to ModeledDirectoryObject. 2015-03-20 16:35:30 -07:00
Michael Jumper 55fb19c87b GUAC-1132: Extract non-database pieces of DirectoryObjectService into IdentifiableObjectService interface. 2015-03-20 16:19:06 -07:00
Michael Jumper 24a7525ab5 GUAC-1135: Derive remote host from X-Forwarded-For, if present. 2015-03-20 13:10:15 -07:00
Michael Jumper ea7e88279e GUAC-1132: Allow batch retrieval/deletion of tunnels. 2015-03-19 12:27:28 -07:00
Michael Jumper c4eea21dee GUAC-1132: Fix typo - it's a tunnel service now. 2015-03-17 16:41:13 -07:00
Michael Jumper c2192c4138 GUAC-1132: Implement getActiveConnection() on UserContext. 2015-03-17 16:18:31 -07:00
Michael Jumper cd52b25b94 GUAC-1132: Add support for getRemoteHost() of ConnectionRecord. Store remote host within AuthenticatedUser. 2015-03-17 15:13:32 -07:00
Michael Jumper 5ce0a3a5a4 GUAC-1132: Socket service is now really tunnel service. 2015-03-17 13:31:26 -07:00
Michael Jumper b33e515895 GUAC-1132: Associate tunnels with records, not sockets. Provide tunnel for connect(). 2015-03-17 13:21:05 -07:00
Michael Jumper 129bb688f4 GUAC-1132: For consistency, rename getActiveSocket() to getSocket(). 2015-03-17 12:27:14 -07:00
Michael Jumper f9bb25fdb2 GUAC-1132: Associate active socket with connection record. 2015-03-17 12:11:29 -07:00
Michael Jumper c7827e0e3f GUAC-1132: Implement tracking of all active connections. 2015-03-16 16:32:47 -07:00
Michael Jumper 1e8d68d611 GUAC-1132: Set of active connections should be synchronized. 2015-03-16 16:31:39 -07:00
Michael Jumper 5cf48c7498 GUAC-1132: Add identifier to connection records. 2015-03-16 16:12:10 -07:00
Michael Jumper 3603155f36 GUAC-1132: Modify API to support listing of active connections and host information. 2015-03-16 14:44:10 -07:00
James Muehlner 59d794ef96 GUAC-801 Merge master. 2015-03-10 18:52:03 -07:00
Michael Jumper f38c246ad0 GUAC-1110: Do not allow connection groups to be updated if doing so would create a cycle. 2015-03-07 22:10:17 -08:00
Michael Jumper 83477e5e75 GUAC-1114: Do not allow users to remove their own system permissions. 2015-03-07 19:24:36 -08:00
Michael Jumper 0ed12dc0eb GUAC-1114: Do not allow users to delete themselves. 2015-03-07 19:15:45 -08:00
Michael Jumper c6132d2f09 GUAC-1104: Add parent group validation. Switch to beforeCreate/beforeUpdate/beforeDelete validation functions. 2015-03-07 15:25:30 -08:00
Michael Jumper eb676c8b3f GUAC-1104: Move parent identifier functions to common base objects. 2015-03-07 14:06:27 -08:00
Michael Jumper 4fb2f4e047 GUAC-1103: Allow unsalted passwords from external systems. 2015-03-06 11:02:00 -08:00
James Muehlner d731d9a404 Merge pull request #103 from glyptodon/group-policy
GUAC-1105: Fix group policies regarding duplicate connections
2015-03-05 18:04:03 -08:00
Michael Jumper 8ae0215e5f GUAC-1113: Require only READ to read another user's permissions. 2015-03-05 17:36:39 -08:00
Michael Jumper 9d6828bf3a GUAC-1105: Reduce code complexity of AbstractGuacamoleSocketService. 2015-03-05 16:36:50 -08:00
Michael Jumper 3166114430 GUAC-1105: Throw GuacamoleClientTooManyException if connection group usage is denied due to duplicate use. 2015-03-05 15:25:42 -08:00
Michael Jumper 3317728658 GUAC-1105: Find first available, least-used seat in multiseat policy. 2015-03-05 15:21:56 -08:00
Michael Jumper a2b4b62d9f GUAC-1105: Fix balancing policy semantics. 2015-03-05 14:04:34 -08:00
James Muehlner f513fa6e2e GUAC-801 Created password update dialog on home screen, grant self READ and UPDATE permission to users upon creation, and added sql update script to grant self READ and UPDATE permissions for users in pre-existing databases. 2015-03-04 23:18:16 -08:00
Michael Jumper a4a3de002b GUAC-1109: Do not rely on SHA2(). Handle password hashing in Java. 2015-03-04 14:23:56 -08:00
Michael Jumper c9f7bdef0d GUAC-1101: Use SSL if requested. Use provided client information. 2015-03-01 23:43:50 -08:00
Michael Jumper bc918d3b04 GUAC-1101: Separate configuration and record saving into own functions. 2015-03-01 23:08:16 -08:00
Michael Jumper feaa2fd63a GUAC-1101: Do not release connections more than once. 2015-03-01 21:52:14 -08:00
Michael Jumper 3f22026c9e GUAC-1101: Implement reserved concurrency policy. 2015-03-01 21:08:01 -08:00
Michael Jumper a824ef14ea GUAC-1101: Implement multiseat and single-seat policies. Stub reserved policy. Select policy based on configuration properties. 2015-03-01 18:32:27 -08:00
Michael Jumper b6c36a12e5 GUAC-1101: Manage active connection records using sets rather than lists. 2015-03-01 18:05:35 -08:00
Michael Jumper 207d5e4330 GUAC-1101: Track connection group usage. 2015-03-01 15:03:07 -08:00
Michael Jumper 89194b432d GUAC-1101: Implement balancing. 2015-03-01 14:13:12 -08:00
Michael Jumper 6f8b0ba41e GUAC-1101: Implement connection and group duplicate checks. Fix username duplicate check. 2015-03-01 12:05:58 -08:00
Michael Jumper 1af52cffa4 GUAC-1101: Insert implicit permissions for created objects. 2015-02-28 23:26:56 -08:00
Michael Jumper d104a3170b GUAC-1101: Do not query accessible identifiers if none given. 2015-02-28 23:26:56 -08:00
Michael Jumper 8d2e953a23 GUAC-1101: Implement querying of user permissions. 2015-02-28 23:26:51 -08:00