| #
01052543 |
| 01-Dec-2023 |
Andreas Gohr <andi@splitbrain.org> |
Adjust ACL remote component to new system
There is no need to implement getMethods anymore. All data comes from reflection
|
| #
53585189 |
| 01-Dec-2023 |
Andreas Gohr <andi@splitbrain.org> |
another set of api tests
|
| #
d4f83172 |
| 31-Aug-2023 |
Andreas Gohr <andi@splitbrain.org> |
code style: line breaks
|
| #
8553d24d |
| 30-Aug-2023 |
Andreas Gohr <andi@splitbrain.org> |
Apply rector renames
|
| #
bff2c9d2 |
| 29-Aug-2023 |
Andreas Gohr <andi@splitbrain.org> |
Apply rector fixes to lib/plugin/acl
|
| #
55cc5b99 |
| 15-Oct-2019 |
Andreas Gohr <gohr@cosmocode.de> |
Merge branch 'pr/2871' into pull-request-2871
* pr/2871: Rename _acl_add to _acl_addOrUpdate Fix #1115
|
| #
32168a78 |
| 27-Sep-2019 |
Guillaume Turri <guillaume.turri@gmail.com> |
Rename _acl_add to _acl_addOrUpdate
because that's what this method actually does now
|
| #
a4e3d556 |
| 11-May-2018 |
Andreas Gohr <andi@splitbrain.org> |
PSR-2 for ACL plugin
|
| #
dd87735d |
| 07-May-2018 |
Andreas Gohr <andi@splitbrain.org> |
PSR-2 compatibility for the remote API libs
|
| #
64159a61 |
| 27-Apr-2018 |
Andreas Gohr <andi@splitbrain.org> |
line lengths shortened
This makes sure all files use line lenghts shorter than 120 characters.
This is a quick fix. It might not always be the nicest change.
|
| #
32b2e368 |
| 18-Apr-2017 |
Dharmik <dharmik8478@gmail.com> |
Fix Typo in remote API (#1938)
* Updated remote.php
Updated remote.php for retrieving all the acl details.
* Updated remote.php
By mistake changed in addAcl instead of listAcls.
|
| #
b8ffd90f |
| 11-May-2016 |
Gerrit Uitslag <klapinklapin@gmail.com> |
Merge remote-tracking branch 'origin/remoteapiGetversions' into duchon-acl_list_xmlrpc
Conflicts: inc/RemoteAPICore.php
|
| #
67b479b2 |
| 30-Jun-2015 |
Gerrit Uitslag <klapinklapin@gmail.com> |
PHPDocs for remote and action
|
| #
42f3fd0a |
| 25-Feb-2015 |
Cyril Duchon-Doris <Cyril.Duchon-Doris@telecom-paristech.org> |
Reverting changes so as to use already existing function, and adding admin check
|
| #
9cbf80e6 |
| 24-Feb-2015 |
Andreas Gohr <andi@splitbrain.org> |
check permissions in ACL plugin's RPC API component. #1056
Security Fix
Severity: Medium Type: Remote Priviledge Escalation Remote: yes
Vulnerability Details:
This fixes a security hole in
check permissions in ACL plugin's RPC API component. #1056
Security Fix
Severity: Medium Type: Remote Priviledge Escalation Remote: yes
Vulnerability Details:
This fixes a security hole in the ACL plugins remote API component. The plugin failed to check for superuser permissions before executing ACL addition or deletion. This means everybody with permissions to call the XMLRPC API also had permissions to set up their own ACL rules and thus circumventing any existing rules.
Risk Assessment:
The XMLRPC API in DokuWiki is marked experimental and off by default. It also implements an additional safeguard by giving access to a configured circle of users and groups only. So only a minor number of DokuWiki installations will be affected at all. For affected installations the risk is high if users with access to the API are not to be trusted. Thus the overall severity of medium.
Resolution:
Installations applying this commit are safe. A hotfix is about to be released. Meanwhile users are advised to disable the XMLRPC API in the config manager.
show more ...
|
| #
1fa1d6bc |
| 24-Feb-2015 |
Cyril Duchon-Doris <Cyril.Duchon-Doris@telecom-paristech.org> |
Fixing bugs found by scrutinizer
|
| #
6d2588b6 |
| 24-Feb-2015 |
Cyril Duchon-Doris <Cyril.Duchon-Doris@telecom-paristech.org> |
Adding listAcls to the XMLRPC API as suggested in Issue #1054
|
| #
42ea7f44 |
| 01-Oct-2014 |
Gerrit Uitslag <klapinklapin@gmail.com> |
Many PHPDocs, some unused and dyn declared vars
many PHPDocs some unused variables some dynamically declared variables declared
|
| #
59bc3b48 |
| 29-Sep-2014 |
Gerrit Uitslag <klapinklapin@gmail.com> |
more scrutinizer issue improvements
|
| #
b8983d3a |
| 21-Aug-2013 |
Matt Perry <matt@mattperry.com> |
Fix CodeSniffer violations
Remove whitespace from end of lines to reduce the number of CodeSniffer violations.
|
| #
1b7fc214 |
| 30-Jul-2013 |
Mohamed Amine BERGAOUI <mabergaoui@gmail.com> |
corrected coding style, deleted ?>, renamed function keys and used plugin_load
|
| #
9f8068d2 |
| 30-Jul-2013 |
Mohamed Amine BERGAOUI <mabergaoui@gmail.com> |
moving ACL remote functions to the ACL plugin
|