summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
...
* webui: add space between action buttons's icon and textPetr Vobornik2014-06-102-2/+6
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: add action dropdownPetr Vobornik2014-06-106-21/+310
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove action list widgetPetr Vobornik2014-06-102-354/+0
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: use h1 in facet title instead of h3Petr Vobornik2014-06-102-12/+9
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: change breadcrumb to PatternFlyPetr Vobornik2014-06-101-85/+79
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: allow multiple base section layoutsPetr Vobornik2014-06-104-42/+74
| | | | | | i.e. one for details facet and other for dialogs Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: display undo and multivalued delete buttons in input-groupPetr Vobornik2014-06-102-28/+82
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: adjust styles to PatternFlyPetr Vobornik2014-06-1019-480/+103
| | | | | | | side effect partially fixes: https://fedorahosted.org/freeipa/ticket/3435 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: change navigation from RCUE to PatternFlyPetr Vobornik2014-06-103-49/+116
| | | | | | | | | | | | Mainly html and css changes. Second level menus are absolutely positioned and so they don't adjust container size making other elements to overlap. side effect partially fixes: https://fedorahosted.org/freeipa/ticket/3435 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove column sizing in tables, use PF stylesPetr Vobornik2014-06-103-100/+58
| | | | | | | | | https://fedorahosted.org/freeipa/ticket/4136 usage of .table-striped class also fixes: https://fedorahosted.org/freeipa/ticket/3050 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: change absolutely positioned layout to fluidPetr Vobornik2014-06-101-218/+22
| | | | | | | https://fedorahosted.org/freeipa/ticket/4136 https://fedorahosted.org/freeipa/ticket/3435 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove unused imagesPetr Vobornik2014-06-1023-22/+0
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove unused collapsible feature from sectionPetr Vobornik2014-06-1012-74/+20
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove unused iconsPetr Vobornik2014-06-1016-78/+0
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove remnants of jquery-uiPetr Vobornik2014-06-109-1340/+0
| | | | Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: apply PatternFly theme on migration pagesPetr Vobornik2014-06-103-93/+146
| | | | | | https://fedorahosted.org/freeipa/ticket/4278 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: styles for alert iconsPetr Vobornik2014-06-102-0/+34
| | | | | | https://fedorahosted.org/freeipa/ticket/4278 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: apply PatternFly theme on config pagesPetr Vobornik2014-06-108-200/+203
| | | | | | https://fedorahosted.org/freeipa/ticket/4278 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: apply PatternFly login theme on reset_password.htmlPetr Vobornik2014-06-102-70/+97
| | | | | | https://fedorahosted.org/freeipa/ticket/4282 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: add PaternFly cssPetr Vobornik2014-06-1032-2359/+1298
| | | | | | | | | | | | | | | | | | | | To update install/ui/css/patternfly.css you should: 1. clone Bootstrap 3, Font-Awesome, Bootstrap-Select and PatternFly to the same parent directory as for FreeIPA (or use symlinks) 2. checkout desired versions of each component 3. run install/ui/util/make-patternfly.css 4. when changing component versions, copy xxx/variables.less from each component to install/ui/less/xxx/ so we can use the variables in our less files This commit contain css made from component versions as follows: - PatternFly: 0.2.5 - Bootstrap: 3.1.1 - Bootstrap-select: 1.4.3 - Font-Awesome: 4.0.3 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove login.htmlPetr Vobornik2014-06-105-168/+0
| | | | | | https://fedorahosted.org/freeipa/ticket/4281 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove logout.htmlPetr Vobornik2014-06-102-31/+0
| | | | | | https://fedorahosted.org/freeipa/ticket/4281 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* Convert Sudo rule default permissions to managedPetr Viktorin2014-06-041-25/+0
| | | | | | Part of the work for: https://fedorahosted.org/freeipa/ticket/4346 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Add read permissions for automember tasksPetr Viktorin2014-06-021-0/+3
| | | | | | | | | | | Permission to read all tasks is given to high-level admins. Managed permission for automember tasks is given to automember task admins. "targetattr=*" is used because tasks are extensibleObject with attributes that aren't in the schema. Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* dns: Add idnsSecInlineSigning attribute, add --dnssec option to zonePetr Viktorin2014-05-281-1/+2
| | | | | | Part of the work for: https://fedorahosted.org/freeipa/ticket/3801 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* admin tools: Log IPA versionPetr Viktorin2014-05-277-0/+7
| | | | | | | | | | | Add the IPA version, and vendor version if applicable, to the beginning of admintool logs -- both framework and indivitual tools that don't yet use the framework. This will make debugging easier. https://fedorahosted.org/freeipa/ticket/4219 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Remove the global anonymous read ACIPetr Viktorin2014-05-264-19/+11
| | | | | | | | | | | | | | Also remove - the deny ACIs that implemented exceptions to it: - no anonymous access to roles - no anonymous access to member information - no anonymous access to hbac - no anonymous access to sudo (2×) - its updater plugin Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Replace "replica admins read access" ACI with a permissionPetr Viktorin2014-05-212-5/+5
| | | | | | | | | Add a 'Read Replication Agreements' permission to replace the read ACI for cn=config. https://fedorahosted.org/freeipa/ticket/3829 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Fixed typo in ipa-replica-manage man pageThorsten Scherf2014-05-121-1/+1
| | | | Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com>
* webui static site delete command fixedAdam Misnyovszki2014-05-071-1/+2
| | | | | | | | When the static test site called batch delete, it always referred to batch.json. This patch fixes it, by referring entityname + '_batch_del.json' Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
* webui OTP token test data addedAdam Misnyovszki2014-05-077-0/+301
| | | | Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
* migration: fix import of wsgiref.utilPetr Vobornik2014-05-071-2/+2
| | | | | | https://fedorahosted.org/freeipa/ticket/4293 Reviewed-By: Tomas Babej <tbabej@redhat.com>
* webui: otptoken-adder dialog - remove obsolete commentPetr Vobornik2014-05-071-1/+0
| | | | | | | - hotp tokens are also supported Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com> Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Adding verb to error message to make it less confusing.Jan Pazdziora2014-05-061-1/+1
| | | | Reviewed-By: Tomas Babej <tbabej@redhat.com>
* webui: fix switching between multiple_choice_section choicesPetr Vobornik2014-05-051-3/+4
| | | | | | | | | | | | | - required indicators are not present for all sections except the last - validation has wrong color for the same sections There was only one layout for all choices. Layout should not be reused because `create` method will reset layout's rows therefore it worked properly only for the last choice. https://fedorahosted.org/freeipa/ticket/4327 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* webui: regression - enable fields on idrange type change (add)Petr Vobornik2014-04-291-8/+9
| | | | | | | | | | ID range adder was not properly addressed in field binding refactoring. The usage of reset caused some weird loops. https://fedorahosted.org/freeipa/ticket/4326 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* webui: select all checkbox remains selected after operationAdam Misnyovszki2014-04-293-1/+9
| | | | | | | | | | The select all checkbox remained selected after bulk operation. This patch fixes it, after any bulk modify or delete operation, unselect_all function is called. https://fedorahosted.org/freeipa/ticket/4245 Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
* aci-update: Add ACI for read-only admin attributesPetr Viktorin2014-04-251-0/+2
| | | | | | | | | | | Most admin access is granted with the "Admin can manage any entry" ACI, but before the global anonymous read ACI is removed, read-only admin access must be explicitly given. Add an ACI for read-only attributes. https://fedorahosted.org/freeipa/ticket/4319 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* aci-update: Trim the admin write blacklistPetr Viktorin2014-04-253-9/+13
| | | | | | | | | | | | | | | | | | | These attributes are removed from the blacklist, which means high-level admins can now modify them: - krbPrincipalAliases - krbPrincipalType - krbPwdPolicyReference - krbTicketPolicyReference - krbUPEnabled - serverHostName The intention is to only blacklist password attributes and attributes that are managed by DS plugins. Also, move the admin ACIs from ldif and trusts.update to aci.update. Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Add several managed read permissions under cn=etcPetr Viktorin2014-04-241-0/+7
| | | | | | | | | | | | | | This adds permissions to: - cn=masters,cn=ipa (with new privilege) - cn=dna,cn=ipa (authenticated users) - cn=ca_renewal,cn=ipa (authenticated users) - cn=CAcert,cn=ipa (anonymous) - cn=replication (authenticated users) - cn=ad (authenticated users) Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Extend anonymous read ACI for containersPetr Viktorin2014-04-241-1/+4
| | | | | | | | | | | | - Allow cn=etc,$SUFFIX with these exceptions: - cn=masters,cn=ipa,cn=etc,$SUFFIX - virtual operations - cn=replicas,cn=ipa,cn=etc,$SUFFIX - Disallow anonymous read access to Kerberos password policy Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Add a new ipaVirtualOperation objectClass to virtual operationsPetr Viktorin2014-04-243-36/+40
| | | | | | | | The entries are moved from the ldif file to an update file. Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* webui doc: typo fixes in guidesAdam Misnyovszki2014-04-232-3/+3
| | | | Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
* webui: fix OTP Token add regressionPetr Vobornik2014-04-171-1/+1
| | | | | | | | | | | | OTP Token add failed because of invalid function call. qr_widget doesn't contain `on_value_changed` method since it inherits from `IPA.widget` and not from `IPA.input_widget`. Emitting the event was preserved for future possible usage. https://fedorahosted.org/freeipa/ticket/4306 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Add managed read permissions to automemberPetr Viktorin2014-04-171-0/+7
| | | | | | Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Allow anonymous read access to Kerberos containersPetr Viktorin2014-04-161-0/+4
| | | | | | Part of the work for: https://fedorahosted.org/freeipa/ticket/3566 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Add managed read permissions to krbtpolicyPetr Viktorin2014-04-161-0/+7
| | | | | | | | | | | | Unlike other objects, the ticket policy is stored in different subtrees: global policy in cn=kerberos and per-user policy in cn=users,cn=accounts. Add two permissions, one for each location. Also, modify tests so that adding new permissions in cn=users doesn't cause failures. Part of the work for: https://fedorahosted.org/freeipa/ticket/3566
* webui: remove IPA.unauthorized_dialogPetr Vobornik2014-04-152-469/+0
| | | | | | https://fedorahosted.org/freeipa/ticket/3903 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* webui: fix combobox styles to work with selenium testingPetr Vobornik2014-04-152-5/+5
| | | | | | https://fedorahosted.org/freeipa/ticket/3903 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* webui: use asynchronous call for authenticationPetr Vobornik2014-04-153-38/+57
| | | | | | | | | | | | | | Change `IPA.login_password` and `IPA.get_credentials` to use async AJAX and to return promise instead of blocking the code. IPA.get_credentials is still partially blocking because of negotiate process. We can't do anything about that. It allows activity indicators to do their job. https://fedorahosted.org/freeipa/ticket/3903 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>