Commit Graph
320 Commits
Author SHA1 Message Date
Michael Jumper 4caddb9c29 GUAC-1126: Document that active connection information may be missing. If a user is a non-admin, hide sensitive information about active connections. 2015-04-09 15:38:46 -07:00
Michael Jumper f8714b735f GUAC-1126: Allow non-admins to see active connections if they have READ permission to those connections. 2015-04-09 15:38:46 -07:00
Michael Jumper 41b71d4d08 GUAC-800: Fix deletion of user permissions through PostgreSQL. 2015-04-08 14:46:05 -07:00
James Muehlner c83c34ee7e Merge pull request #121 from glyptodon/active-connection-directory
GUAC-1132: Implement active connection directory.
2015-03-23 16:30:53 -07:00
Michael Jumper bbae09b51b GUAC-1128: Bump version numbers to 0.9.6 as necessary. 2015-03-23 15:36:00 -07:00
Michael Jumper e1ae69c159 GUAC-1132: Add permissions for active connections. 2015-03-20 18:24:56 -07:00
Michael Jumper 2179f7b143 GUAC-1132: Move canReadPermissions() into AbstractPermissionService. 2015-03-20 18:24:17 -07:00
Michael Jumper f9584bb59d GUAC-1132: Split non-database permission service functions into interfaces. 2015-03-20 17:36:54 -07:00
Michael Jumper ffc29ed398 GUAC-1132: Handle active connections via permissions. Expose via dedicated object - do not rely on calling them tunnels. 2015-03-20 17:17:59 -07:00
Michael Jumper c2bffcba23 GUAC-1132: Rename DirectoryObject to ModeledDirectoryObject. 2015-03-20 16:35:30 -07:00
Michael Jumper 55fb19c87b GUAC-1132: Extract non-database pieces of DirectoryObjectService into IdentifiableObjectService interface. 2015-03-20 16:19:06 -07:00
Michael Jumper 24a7525ab5 GUAC-1135: Derive remote host from X-Forwarded-For, if present. 2015-03-20 13:10:15 -07:00
Michael Jumper ea7e88279e GUAC-1132: Allow batch retrieval/deletion of tunnels. 2015-03-19 12:27:28 -07:00
Michael Jumper c4eea21dee GUAC-1132: Fix typo - it's a tunnel service now. 2015-03-17 16:41:13 -07:00
Michael Jumper c2192c4138 GUAC-1132: Implement getActiveConnection() on UserContext. 2015-03-17 16:18:31 -07:00
Michael Jumper cd52b25b94 GUAC-1132: Add support for getRemoteHost() of ConnectionRecord. Store remote host within AuthenticatedUser. 2015-03-17 15:13:32 -07:00
Michael Jumper 5ce0a3a5a4 GUAC-1132: Socket service is now really tunnel service. 2015-03-17 13:31:26 -07:00
Michael Jumper b33e515895 GUAC-1132: Associate tunnels with records, not sockets. Provide tunnel for connect(). 2015-03-17 13:21:05 -07:00
Michael Jumper 129bb688f4 GUAC-1132: For consistency, rename getActiveSocket() to getSocket(). 2015-03-17 12:27:14 -07:00
Michael Jumper f9bb25fdb2 GUAC-1132: Associate active socket with connection record. 2015-03-17 12:11:29 -07:00
Michael Jumper c7827e0e3f GUAC-1132: Implement tracking of all active connections. 2015-03-16 16:32:47 -07:00
Michael Jumper 1e8d68d611 GUAC-1132: Set of active connections should be synchronized. 2015-03-16 16:31:39 -07:00
Michael Jumper 5cf48c7498 GUAC-1132: Add identifier to connection records. 2015-03-16 16:12:10 -07:00
Michael Jumper 3603155f36 GUAC-1132: Modify API to support listing of active connections and host information. 2015-03-16 14:44:10 -07:00
James Muehlner 59d794ef96 GUAC-801 Merge master. 2015-03-10 18:52:03 -07:00
Michael Jumper f38c246ad0 GUAC-1110: Do not allow connection groups to be updated if doing so would create a cycle. 2015-03-07 22:10:17 -08:00
Michael Jumper 83477e5e75 GUAC-1114: Do not allow users to remove their own system permissions. 2015-03-07 19:24:36 -08:00
Michael Jumper 0ed12dc0eb GUAC-1114: Do not allow users to delete themselves. 2015-03-07 19:15:45 -08:00
Michael Jumper 45b31064c0 GUAC-1103: Add missing explicit typecast. 2015-03-07 19:01:16 -08:00
Michael Jumper c6132d2f09 GUAC-1104: Add parent group validation. Switch to beforeCreate/beforeUpdate/beforeDelete validation functions. 2015-03-07 15:25:30 -08:00
Michael Jumper eb676c8b3f GUAC-1104: Move parent identifier functions to common base objects. 2015-03-07 14:06:27 -08:00
Michael Jumper 40bdfb57b3 GUAC-1103: Update README to include PostgresQL. 2015-03-06 13:14:33 -08:00
Michael Jumper ee3d8f77c2 GUAC-1103: Add missing typecase for connection group type. 2015-03-06 13:03:41 -08:00
Michael Jumper db6a9f07a3 GUAC-1103: Fix case of user READ permission. 2015-03-06 12:50:33 -08:00
Michael Jumper 8f557ed338 GUAC-1103: Fix guacadmin user creation script. Must not insert IDs directly into serial columns - doing so clashes with the sequence resulting in PK failures upon insert. 2015-03-06 12:48:12 -08:00
Michael Jumper 4fb2f4e047 GUAC-1103: Allow unsalted passwords from external systems. 2015-03-06 11:02:00 -08:00
Michael Jumper 187f61b483 GUAC-1103: Explicitly cast strings to integers. 2015-03-06 11:02:00 -08:00
Michael Jumper dbab6acd2c GUAC-1103: No INSERT IGNORE in postgres. 2015-03-06 11:02:00 -08:00
Michael Jumper 233c12b2a1 GUAC-1103: Add PostgreSQL to .tar.gz assembly. 2015-03-06 11:02:00 -08:00
Michael Jumper 4a0213397b GUAC-1103: Convert string identifiers to integer where known to be integers. 2015-03-06 11:01:59 -08:00
Michael Jumper 06a7ab4cec GUAC-1103: Explicitly cast permission types. 2015-03-06 11:01:59 -08:00
Michael Jumper 4e08c10f94 GUAC-1103: Translate copied MySQL schema to PostgreSQL. 2015-03-06 11:01:59 -08:00
Michael Jumper 15240cc7b1 GUAC-1103: Add stubbed PostgreSQL authentication by copying the MySQL auth. Has not yet been tested against an actual DB nor the PostgreSQL JDBC driver. 2015-03-06 11:01:52 -08:00
James Muehlner d731d9a404 Merge pull request #103 from glyptodon/group-policy
GUAC-1105: Fix group policies regarding duplicate connections
2015-03-05 18:04:03 -08:00
Michael Jumper 8ae0215e5f GUAC-1113: Require only READ to read another user's permissions. 2015-03-05 17:36:39 -08:00
Michael Jumper 9d6828bf3a GUAC-1105: Reduce code complexity of AbstractGuacamoleSocketService. 2015-03-05 16:36:50 -08:00
Michael Jumper 3166114430 GUAC-1105: Throw GuacamoleClientTooManyException if connection group usage is denied due to duplicate use. 2015-03-05 15:25:42 -08:00
Michael Jumper 3317728658 GUAC-1105: Find first available, least-used seat in multiseat policy. 2015-03-05 15:21:56 -08:00
Michael Jumper a2b4b62d9f GUAC-1105: Fix balancing policy semantics. 2015-03-05 14:04:34 -08:00
James Muehlner f513fa6e2e GUAC-801 Created password update dialog on home screen, grant self READ and UPDATE permission to users upon creation, and added sql update script to grant self READ and UPDATE permissions for users in pre-existing databases. 2015-03-04 23:18:16 -08:00