mirrors/Radicale
1
0
Fork 0
mirror of https://github.com/Kozea/Radicale.git synced 2025-04-03 21:27:36 +03:00
Code Issues Projects Releases Packages Wiki Activity
3014 commits 5 branches 77 tags 7.2 MiB
Commit graph

78 commits

Author SHA1 Message Date
TownCube
916c9db3c8 Skip group collection match when groups are not used 2024-12-07 18:24:29 +00:00
Peter Bieringer
8f80e0eb92 update copyright 2024-12-03 21:20:44 +01:00
Peter Bieringer
a54fb10e17 Fix: debug logging in rights/from_file 2024-12-03 21:19:12 +01:00
Dipl. Ing. Péter Varkoly
d1ceb620e4 Adapt function template discovery to the implementation 2024-09-22 18:38:21 +02:00
Dipl. Ing. Péter Varkoly
98c5ffdc87 Increase performace: open and parse rigts file only by starting. 
Hanlde right sections without user.
 2024-09-21 18:39:39 +02:00
Dipl. Ing. Péter Varkoly
a7f33c8795 Reorder imports. 2024-09-12 12:17:34 +02:00
Dipl. Ing. Péter Varkoly
b47c76e9ca Fix definition of _user_groups in rights 2024-09-12 00:59:26 +02:00
Dipl. Ing. Péter Varkoly
e05fbeb950 Apply suggestions of mypy 2024-09-11 09:13:26 +02:00
Dipl. Ing. Péter Varkoly
d75b071fec Fix the problems found by flake8. 2024-09-11 08:12:08 +02:00
Dipl. Ing. Péter Varkoly
606bd30514 Rebase 2024-09-05 10:44:28 +02:00
Peter Bieringer
a79c2ad83e align option name 2024-08-28 08:59:32 +02:00
Peter Bieringer
e852c887d7 Enhancement: add option to toggle debug log of right with doesn't match 2024-08-28 08:03:16 +02:00
Dipl. Ing. Péter Varkoly
5167f12624 Rebase rights/from_file.py. 
Apply proposed/asked changes.
 2024-08-26 11:21:53 +02:00
Dipl. Ing. Péter Varkoly
19e5972b4f Fix merge conflicts. 2024-08-25 14:11:48 +02:00
Mathieu Dupuy
47bc966a13
fix misspellings 2024-07-24 12:29:13 +02:00
Peter Bieringer
ac5e33c723 log matching permission 2024-06-11 13:33:34 +02:00
Peter Varkoly
b0f8d37294 User the intersection built in function of set to make the code more readable. 2022-02-24 10:45:45 +01:00
Peter Varkoly
8d19fd7a64 Now rights can be add to user groups too. 2022-02-21 17:15:21 +01:00
Dipl. Ing. Péter Varkoly
eda8309a04 Implementing group based collection matching. 
Optimize rights evaluation.
 2022-02-21 08:36:10 +01:00
Lauri Tirkkonen
4c44940ec1 config & rights: use open() for better error messages 
ConfigParser().read() doesn't differentiate between different types of
failure to read files, causing eg. "No such file" to be logged in all
cases, for example if permissions are insufficient. fix that by using
open() and ConfigParser().read_file() instead.
 2022-01-11 20:20:21 +01:00
Unrud
bbaf0ebd8c Change name in file header 2021-12-09 16:55:46 +01:00
Unrud
cecb17df03 More type hints 2021-09-26 22:24:45 +02:00
Unrud
7f2d5cea62 New right "i": Only allowing HTTP method GET 2020-04-22 19:20:42 +02:00
Unrud
d5f5eeeddf from_file rights: Replace config parser interpolation 2020-04-22 19:20:24 +02:00
Unrud
f6a3a19680 Simplify Rights plugin interface 2020-04-09 22:02:03 +02:00
Unrud
db7587c593 Cosmetic changes 2020-01-21 19:40:02 +01:00
Unrud
e07df9fd1d Prefix internal attributes with underscore 2020-01-19 21:07:54 +01:00
Unrud
8f55ab858c Improve documentation 2020-01-17 05:00:30 +01:00
Unrud
0cd95f8a39 Rename loader to load_plugin 2020-01-15 00:33:21 +01:00
Unrud
8543f3ea1d Extract method loader() 2020-01-14 22:43:48 +01:00
Unrud
2e4924a0da Improve documentation 2020-01-13 15:51:10 +01:00
Unrud
88a0af8ba1 Improve documentation 2020-01-12 23:32:28 +01:00
Unrud
b7590f8c84 Rework configuration 2019-06-17 04:18:09 +02:00
Unrud
63e6d091b9 Update copyright 2019-06-17 04:13:24 +02:00
Unrud
6e19ed893a show module name in error message 2018-09-18 21:04:57 +02:00
Unrud
5e0a387ed9 remove whitespace before email 2018-09-04 03:33:47 +02:00
Unrud
5429f5c1a9 assert sanitized and stripped paths 2018-08-28 16:19:50 +02:00
Unrud
8869b34470 refactor 2018-08-28 16:19:43 +02:00
Guillaume Ayoub
1001bcb676 Remove extra auth, rights and storage modules 2016-04-07 19:02:52 +02:00
Guillaume Ayoub
434cb533e9 Remove Python 2 support 2016-03-31 19:57:40 +02:00
Guillaume Ayoub
83304c1378 Stupid me, that was PEP 20 (fix 347 for Python 2 too) 2016-01-06 21:44:20 +01:00
Guillaume Ayoub
620d9f8316 Readability counts - PEP8™ (fix #347) 2016-01-06 20:19:12 +01:00
Guillaume Ayoub
e7ce00d54f Style 2015-12-31 12:49:41 +01:00
Guillaume Ayoub
b484d42547 Merge pull request #335 from Kozea/permissions 
Use the first matching section for getting rights
 2015-12-31 11:30:29 +01:00
Unrud
4bfe7c9f79 Prevent "regex injection" 
If an attacker is able to authenticate with a user name like .* he can bypass limitations imposed by "owner_write" and "owner_only".
 2015-12-23 07:05:20 +01:00
Guillaume Ayoub
e807c3d35b Use the first matching section for getting rights 2015-12-03 15:22:12 +01:00
Guillaume Ayoub
e69bec1272 Don't rely on case-sensitive imports, fix #282 
We should burn PEP 235, bicameral scripts, encodings, Python2/3 compatibility,
Windows, MacOS X, filenames, unicode (including composite characters), and the
whole world. And LF/CR too, of course.

Let's recreate a language relying on only two characters. Anyone interested?
 2015-04-29 18:55:56 +02:00
Guillaume Ayoub
2b4485f6ae Allow requests on root folder for authenticated users 2014-08-07 15:06:48 +02:00
Guillaume Ayoub
6021f16866 Fix owner_* methods (fix #151) 2014-05-06 15:15:58 +02:00
Guillaume Ayoub
1ab07d84e6 Add some documentation about the "user" key in the "regex" rights module 2014-04-16 18:56:57 +02:00