Michael Jumper
fe36014e97
GUACAMOLE-699: Add helper script for verifying translations.
2019-01-12 16:36:58 -08:00
Michael Jumper
78f1ae1b4e
GUACAMOLE-682: Merge support for specfying the Maven build profile when building the Docker image.
2018-12-24 09:06:41 -08:00
Michael Jumper
caf07a92a9
Merge 1.0.0 changes back to master.
2018-12-05 14:40:34 -08:00
Michael Jumper
801a5df9f1
GUACAMOLE-526: Merge changes correcting regression in CAS due to AngularJS update.
...
Including `ngRoute` as a dependency of a module which defines a custom
field type will always result in the following error:
Unknown provider: $rootElementProvider <- $rootElement <- $location <- $route <- $location
This seems to be due to the manner in which the injector is created for
field types. `$rootElementProvider` is not available for injection in
the context of the injector of a custom field. This is generally OK, but
`ngRoute` transitively depends on `$rootElementProvider`. Since
`$rootElementProvider` cannot be injected within the context of a field
type, no field type can depend on ngRoute without causing this error.
Note that extensions can still leverage `ngRoute` (this is already done
by the OpenID support). It just cannot be declared as a dependency of a
module containing a custom field type.
2018-12-05 14:32:37 -08:00
Michael Jumper
ef0cb1ee7a
GUACAMOLE-598: Ignore if current user has no associated data. Authentication providers are not required to provide data for the users they authenticate.
2018-12-04 13:22:16 -08:00
Michael Jumper
fc457c080d
Merge 1.0.0 changes back to master.
2018-12-03 07:32:21 -08:00
Michael Jumper
a967ffa41c
GUACAMOLE-670: Merge changes correcting conflicting versions of SLF4J.
2018-12-03 07:30:23 -08:00
Michael Jumper
95b5fdccdc
GUACAMOLE-656: Explicitly depend on maven-surefire-plugin 3.0.0-M1 due to SUREFIRE-1588.
2018-11-08 22:09:35 -08:00
Michael Jumper
b355106c77
GUACAMOLE-220: Remove unnecessary explicit type parameters.
2018-11-08 20:11:17 -08:00
Michael Jumper
a4d6f62df0
GUACAMOLE-220: Reword description of getGroupSearchFilter() to be less brain-meltingly difficult to read.
2018-11-08 19:55:49 -08:00
Michael Jumper
83033cad65
GUACAMOLE-220: Use JavaDoc "{@link Map}" to point to Map interface.
2018-11-08 19:45:25 -08:00
Michael Jumper
3c5594db2e
GUACAMOLE-220: Group attribute "disabled" controls whether the group has any effect, not whether login is allowed.
2018-11-03 17:24:06 -07:00
Michael Jumper
2d6ba84a3d
GUACAMOLE-220: Refactor default behavior of SimpleUser and SimpleUserGroup into AbstractUser and AbstractUserGroup.
2018-11-03 14:52:24 -07:00
Michael Jumper
90a6d8e371
GUACAMOLE-220: Clarify usage of SimpleUser and SimpleUserGroup.
2018-11-03 14:14:04 -07:00
Michael Jumper
d533de118f
GUACAMOLE-220: Add EMPTY_SET convenience constant to all core set interfaces.
2018-11-03 14:08:46 -07:00
Michael Jumper
d10256e151
GUACAMOLE-220: Deprecate built-in support for storage of permissions in SimpleUser. Add convenience constructors for SimpleObjectPermissionSet.
2018-11-03 13:58:50 -07:00
Michael Jumper
aa0c654231
GUACAMOLE-220: Retrieve user groups from LDAP. Take immediate group membership into account.
2018-11-03 12:41:54 -07:00
Michael Jumper
bdc792603d
GUACAMOLE-220: Add configuration property for setting the attributes which uniquely identify user groups within LDAP.
2018-11-03 12:41:54 -07:00
Michael Jumper
7c57b448bb
GUACAMOLE-220: Define generic service for executing LDAP queries. Refactor existing services to remove common code.
2018-11-03 12:41:54 -07:00
Michael Jumper
929c7de2c9
GUACAMOLE-220: Add user group permissions to SimpleUser.
2018-11-03 12:41:54 -07:00
Michael Jumper
5362bc6708
GUACAMOLE-220: Add SimpleUserGroup (read-only UserGroup implementation with no members).
2018-11-03 12:41:54 -07:00
Michael Jumper
143c10b6ef
GUACAMOLE-524: Correct handling of tokens within SimpleConnection. The copy of the configuration should be filtered, not the original, and token values need to actually be set.
2018-10-16 14:53:10 -07:00
Michael Jumper
333a8c411f
GUACAMOLE-524: Provide convenience constructor for TokenFilter which initializes the filter with provided tokens.
2018-10-16 14:53:10 -07:00
Michael Jumper
d79988d59e
GUACAMOLE-96: Do not require TOTP for users that cannot enroll due to lack of permission to update their account.
2018-10-11 01:35:51 -07:00
Michael Jumper
13e2b06666
GUACAMOLE-524: Switch to "LDAP_" prefix for LDAP user attribute tokens.
2018-10-05 12:54:00 -07:00
Michael Jumper
cb30b148b9
GUACAMOLE-524: Consistently generate token names from LDAP attributes with arbitrary naming conventions.
2018-10-05 12:47:26 -07:00
Michael Jumper
98bd3ead21
GUACAMOLE-524: Remove Attributes interface from AuthenticatedUser. Rely instead on tokens injected via decoration of connections.
2018-10-05 12:47:26 -07:00
Michael Jumper
0d7cff5f2d
GUACAMOLE-524: Add convenience classes for injecting custom parameter tokens through decoration.
2018-10-05 12:47:26 -07:00
Michael Jumper
7a3f51be71
GUACAMOLE-524: Rename LDAP-specific AuthenticatedUser / UserContext to not conflict with guacamole-ext classes.
2018-10-05 12:47:26 -07:00
Michael Jumper
1210d5624c
GUACAMOLE-524: Deprecate and replace StandardTokens with arbitrary tokens provided to Connectable.connect().
2018-10-05 12:47:26 -07:00
Michael Jumper
adb9aaa5e2
GUACAMOLE-220: Ignore missing user or group when retrieving permissions/memberships.
2018-10-05 11:56:42 -07:00
Michael Jumper
11c1d8c97e
GUACAMOLE-96: Add protected convenience method for retrieving delegate object.
2018-10-05 10:36:47 -07:00
Michael Jumper
e3c1b6ac98
GUACAMOLE-232: Mark key as implicitly pressed only when pressed due to another, identifiable key event.
2018-10-03 21:30:26 -07:00
Michael Jumper
9d8027c5cd
GUACAMOLE-232: Correct inverted explicit/implicit logic.
2018-10-03 11:47:07 -07:00
Michael Jumper
eead01944e
GUACAMOLE-232: Rely on recentKeysym for keyup only when the guessed key doesn't seem to actually be pressed.
2018-10-03 10:29:39 -07:00
Michael Jumper
2ec7e48ca9
GUACAMOLE-232: Track whether keys were pressed implicitly. Automatically release all keys if only implicitly pressed keys remain.
2018-10-03 10:29:39 -07:00
Michael Jumper
6f0787f0c1
GUACAMOLE-232: Reset tracking of recent keysym after key is released.
2018-10-02 22:19:40 -07:00
Michael Jumper
8c096778bc
GUACAMOLE-232: Fall back to using recent keysym only after failing to determine released key by keycode.
2018-10-02 22:19:15 -07:00
Michael Jumper
035813ff0b
GUACAMOLE-232: Take best guess of key being pressed/released into account before assuming modifier states need to be resynced.
2018-10-02 22:18:17 -07:00
Michael Jumper
aae17f3a9f
GUACAMOLE-524: Accept only supported attributes via setAttributes(). Do not replace existing attributes.
2018-10-02 20:32:24 -07:00
Michael Jumper
ea142d15ce
GUACAMOLE-360: Add convenience function for testing user identity.
2018-10-01 11:46:34 -07:00
Michael Jumper
ad937defa6
GUACAMOLE-360: Update active connection permission check to support user groups.
2018-10-01 11:35:32 -07:00
Michael Jumper
4d5196207b
GUACAMOLE-220: Correct typo - "that status of" should be "the status of".
2018-09-30 23:12:49 -07:00
Michael Jumper
f4ccf8ef62
GUACAMOLE-220: Remove effectively-redundant admin permission check.
2018-09-30 23:11:20 -07:00
Michael Jumper
dee4e89ede
GUACAMOLE-437: Remove erroneously-committed, non-breaking spaces (U+00A0) from source.
2018-09-29 15:04:28 -07:00
Michael Jumper
182f204c95
GUACAMOLE-635: Heap pollution is not possible within SimpleDirectory(ObjectType... objects).
...
From https://docs.oracle.com/javase/tutorial/java/generics/nonReifiableVarargsType.html#vulnerabilities :
"Heap pollution occurs when a variable of a parameterized type refers
to an object that is not of that parameterized type."
In this case, the parameterized type (ObjectType) and the array of that
type within this constructor are always used as their formal types.
2018-09-29 13:19:21 -07:00
Michael Jumper
1fef6a05e1
GUACAMOLE-635: Require Java 1.8 for all Java components except guacamole-common.
2018-09-29 12:56:17 -07:00
Michael Jumper
bb6e8bc1c7
GUACAMOLE-220: Correct documentation of update script.
...
The UNIQUE constraint is being added once the column is expected to be
unique, not necessarily because it should safely point to entries of a
particular table.
2018-09-27 20:15:23 -07:00
Michael Jumper
7521cdc0ae
GUACAMOLE-220: Rows are deleted to modify the one-to-many relationship, not to establish it.
2018-09-27 20:10:32 -07:00
Michael Jumper
5fdd0bb148
GUACAMOLE-220: Remove unnecessary use of multi-result select (use selectOne() instead).
2018-09-27 20:07:24 -07:00
Michael Jumper
a552d88c54
GUACAMOLE-220: Clarify group rename validation logic.
2018-09-27 20:06:18 -07:00
Michael Jumper
fedccebb93
GUACAMOLE-220: Remove unnecessary ModeledUserGroup constructor (equivalent to default constructor).
2018-09-27 20:03:35 -07:00
Michael Jumper
4a5f271702
GUACAMOLE-220: Correct user vs. entity wording in documentation.
2018-09-27 19:45:30 -07:00
Michael Jumper
75805e4cab
GUACAMOLE-629: Add support for creating argument value streams using the "argv" instruction.
2018-09-25 13:01:15 -07:00
Michael Jumper
af8f5b3a80
GUACAMOLE-622: Add parameter definitions for telnet login success/failure regex.
2018-09-21 17:33:44 -07:00
Michael Jumper
d4a9208c2b
GUACAMOLE-624: Include user full name and organization in filtered attributes.
2018-09-21 14:14:57 -07:00
Michael Jumper
660fe82fff
GUACAMOLE-624: Add columns displaying user full name and organization.
2018-09-21 14:14:39 -07:00
Michael Jumper
8399b252cd
GUACAMOLE-220: Detect cycles within recursive query. SQL Server cannot deal with cycles on its own.
2018-09-19 23:56:53 -07:00
Michael Jumper
ee35620194
GUACAMOLE-220: Update SQL Server mapping with respect to user group support.
2018-09-19 23:56:53 -07:00
Michael Jumper
dec7b3c340
GUACAMOLE-220: Dynamically detect whether the MariaDB / MySQL server supports recursive CTEs.
2018-09-19 23:56:53 -07:00
Michael Jumper
204b6a4b24
GUACAMOLE-220: Update MySQL mapping with respect to user group support.
2018-09-19 23:56:52 -07:00
Michael Jumper
1d0fcc1732
GUACAMOLE-220: Add MySQL and SQL Server versions of user group schema.
2018-09-19 23:56:52 -07:00
Michael Jumper
78d5e3b9d7
GUACAMOLE-220: Manually recurse through the group membership graph if the database engine does not support recursive queries.
2018-09-19 23:56:52 -07:00
Michael Jumper
48948fc245
GUACAMOLE-220: Add missing JDBC-specific USER_GROUP_ATTRIBUTES translation strings.
2018-09-19 23:56:52 -07:00
Michael Jumper
2999c56098
GUACAMOLE-220: Map and allow manipulation of the user group parents of users.
2018-09-19 23:56:52 -07:00
Michael Jumper
856ab44373
GUACAMOLE-220: Map and allow manipulation of the user group parents of user groups.
2018-09-19 23:56:52 -07:00
Michael Jumper
63be247db6
GUACAMOLE-220: Map and allow manipulation of the user group members of user groups.
2018-09-19 23:56:52 -07:00
Michael Jumper
ccd7920b22
GUACAMOLE-220: Map and allow manipulation of the user members of user groups.
2018-09-19 23:56:52 -07:00
Michael Jumper
8f06b7a3f9
GUACAMOLE-220: Define base interfaces for mapping RelatedObjectSets to the database.
2018-09-19 23:56:52 -07:00
Michael Jumper
a39d863797
GUACAMOLE-220: Take group "disabled" flag into account when determining effective groups. Do not inherit from nor apply disabled groups.
2018-09-19 23:56:52 -07:00
Michael Jumper
c5c2984151
GUACAMOLE-220: Map and query user group tables.
2018-09-19 23:56:52 -07:00
Michael Jumper
69f58c8ca3
GUACAMOLE-220: Refactor handling of JDBC permissions to abstract away users vs. user groups.
2018-09-19 23:56:51 -07:00
Michael Jumper
14d10fb42a
GUACAMOLE-220: Inherit from groups even if not determined by database.
2018-09-19 23:56:51 -07:00
Michael Jumper
6e71f330b8
GUACAMOLE-220: Move JDBC handling of effective groups to RemoteAuthenticatedUser level. Stub out retrieval of effective groups.
2018-09-19 23:56:51 -07:00
Michael Jumper
a155397947
GUACAMOLE-220: Implement permission inheritance within SQL queries.
2018-09-19 23:56:51 -07:00
Michael Jumper
199f518cdb
GUACAMOLE-220: Use effective permissions when deciding whether a user has permission to perform an action.
2018-09-19 23:56:51 -07:00
Michael Jumper
0a69630cbb
GUACAMOLE-220: Implement base API changes within database auth allowing for permission inheritance.
2018-09-19 23:56:51 -07:00
Michael Jumper
72bac09f43
GUACAMOLE-220: Add explicit mapper for entities (the basis for users and groups).
2018-09-19 23:56:51 -07:00
Michael Jumper
b499092d06
GUACAMOLE-220: Update SQL queries to use guacamole_entity table where applicable.
2018-09-19 23:56:51 -07:00
Michael Jumper
d95e059612
GUACAMOLE-220: Refactor user-related model objects and services to leverage the base "entity" model.
2018-09-19 23:56:51 -07:00
Michael Jumper
e72f88febf
GUACAMOLE-220: Define base schema for user groups.
2018-09-19 23:56:51 -07:00
Michael Jumper
e77ca735a0
GUACAMOLE-622: Increase size of instruction queue within FailoverGuacamoleSocket. Allow limit to be overridden.
...
Some protocols, in particular SSH and telnet, may send a decent amount
of data before the connection status is known.
2018-09-11 14:49:46 -07:00
Michael Jumper
2161260e34
GUACAMOLE-220: Correct handling of permission-filtered directory search.
...
The correct ObjectPermissionSet should be used to filter the identifiers
used. Previous code was always using the ObjectPermissionSet specific to
permissions affecting user objects, and thus was incorrect for all other
types of objects (connections, connection groups, etc.).
2018-09-08 13:09:59 -07:00
Michael Jumper
3492b556c3
GUACAMOLE-220: Add missing definitions for CREATE_USER_GROUP system permission.
2018-09-08 13:09:24 -07:00
Michael Jumper
0cc5c3667b
GUACAMOLE-598: Ensure fatal error message is hidden by default, shown only when a fatal error has actually occurred.
2018-09-07 13:37:06 -07:00
Michael Jumper
d28c4a7cce
GUACAMOLE-611: Update internal failure warnings to reflect the fact that an auth attempt is being ignored, not "denied".
2018-09-07 12:36:11 -07:00
Michael Jumper
34bab9524e
GUACAMOLE-567: Regularly test connection stability of HTTP tunnel.
...
Unlike the WebSocket tunnel, where a manual ping request/response must
be explicitly implemented, we can rely on HTTP's own request/response
to verify stability.
2018-09-07 12:20:28 -07:00
Michael Jumper
819d317834
GUACAMOLE-567: Add support for WebSocket-specific ping messages to the legacy WebSocket tunnel implementations.
2018-09-07 12:20:28 -07:00
Michael Jumper
ea0b33bee1
GUACAMOLE-567: Use ping messages specific to the WebSocket tunnel to test connection stability independently of the underlying Guacamole connection.
2018-09-07 12:20:28 -07:00
Michael Jumper
5825835237
GUACAMOLE-567: Add tunnel isConnected() function. Consider both OPEN and UNSTABLE status as connected.
2018-09-07 12:20:28 -07:00
Michael Jumper
fe07cf9b70
GUACAMOLE-567: Move client instability state to own flag. Actual current connection state is lost otherwise.
2018-09-07 12:20:28 -07:00
Michael Jumper
9d4aae187b
GUACAMOLE-611: Handle sublasses of Error in addition to RuntimeException.
2018-08-25 13:54:06 -07:00
Michael Jumper
cc742f2143
GUACAMOLE-611: Advise administrator to set "skip-if-unavailable" if similar internal errors should be tolerated in the future.
2018-08-25 13:45:41 -07:00
Michael Jumper
8fae19dee9
GUACAMOLE-611: Rename property defining tolerated auth providers to "skip-if-unavailable".
2018-08-25 13:20:38 -07:00
Michael Jumper
57831441ed
GUACAMOLE-611: Allow authentication providers to be explicitly skipped if internal errors occur.
2018-08-25 13:19:17 -07:00
Michael Jumper
7917f46b36
GUACAMOLE-220: Allow attributes to be specified via the template supplied to REST object constructors, for consistency's sake.
2018-08-09 10:46:06 -07:00
Michael Jumper
6aaef7685f
GUACAMOLE-220: Select from multiple datasources deterministically.
2018-08-09 10:46:06 -07:00
Michael Jumper
8ad3f25371
GUACAMOLE-220: Add management tab and editor for user groups.
2018-08-09 10:46:06 -07:00
Michael Jumper
de80957404
GUACAMOLE-220: Add management interface for user parent groups.
2018-08-08 21:50:26 -07:00
Michael Jumper
ca1db7831b
GUACAMOLE-220: Do not display "X" for removing an identifier if the identifier cannot actually be edited.
2018-08-08 21:50:26 -07:00