History log of /dokuwiki/lib/plugins/acl/remote.php (Results 1 – 22 of 22)
Revision Date Author Comments
# 01052543 01-Dec-2023 Andreas Gohr <andi@splitbrain.org>

Adjust ACL remote component to new system

There is no need to implement getMethods anymore. All data comes from
reflection


# 53585189 01-Dec-2023 Andreas Gohr <andi@splitbrain.org>

another set of api tests


# d4f83172 31-Aug-2023 Andreas Gohr <andi@splitbrain.org>

code style: line breaks


# 8553d24d 30-Aug-2023 Andreas Gohr <andi@splitbrain.org>

Apply rector renames


# bff2c9d2 29-Aug-2023 Andreas Gohr <andi@splitbrain.org>

Apply rector fixes to lib/plugin/acl


# 55cc5b99 15-Oct-2019 Andreas Gohr <gohr@cosmocode.de>

Merge branch 'pr/2871' into pull-request-2871

* pr/2871:
Rename _acl_add to _acl_addOrUpdate
Fix #1115


# 32168a78 27-Sep-2019 Guillaume Turri <guillaume.turri@gmail.com>

Rename _acl_add to _acl_addOrUpdate

because that's what this method actually does now


# a4e3d556 11-May-2018 Andreas Gohr <andi@splitbrain.org>

PSR-2 for ACL plugin


# dd87735d 07-May-2018 Andreas Gohr <andi@splitbrain.org>

PSR-2 compatibility for the remote API libs


# 64159a61 27-Apr-2018 Andreas Gohr <andi@splitbrain.org>

line lengths shortened

This makes sure all files use line lenghts shorter than 120 characters.

This is a quick fix. It might not always be the nicest change.


# 32b2e368 18-Apr-2017 Dharmik <dharmik8478@gmail.com>

Fix Typo in remote API (#1938)

* Updated remote.php

Updated remote.php for retrieving all the acl details.

* Updated remote.php

By mistake changed in addAcl instead of listAcls.


# b8ffd90f 11-May-2016 Gerrit Uitslag <klapinklapin@gmail.com>

Merge remote-tracking branch 'origin/remoteapiGetversions' into duchon-acl_list_xmlrpc

Conflicts:
inc/RemoteAPICore.php


# 67b479b2 30-Jun-2015 Gerrit Uitslag <klapinklapin@gmail.com>

PHPDocs for remote and action


# 42f3fd0a 25-Feb-2015 Cyril Duchon-Doris <Cyril.Duchon-Doris@telecom-paristech.org>

Reverting changes so as to use already existing function, and adding admin check


# 9cbf80e6 24-Feb-2015 Andreas Gohr <andi@splitbrain.org>

check permissions in ACL plugin's RPC API component. #1056

Security Fix

Severity: Medium
Type: Remote Priviledge Escalation
Remote: yes

Vulnerability Details:

This fixes a security hole in

check permissions in ACL plugin's RPC API component. #1056

Security Fix

Severity: Medium
Type: Remote Priviledge Escalation
Remote: yes

Vulnerability Details:

This fixes a security hole in the ACL plugins remote API component. The
plugin failed to check for superuser permissions before executing ACL
addition or deletion. This means everybody with permissions to call the
XMLRPC API also had permissions to set up their own ACL rules and thus
circumventing any existing rules.

Risk Assessment:

The XMLRPC API in DokuWiki is marked experimental and off by default. It
also implements an additional safeguard by giving access to a configured
circle of users and groups only. So only a minor number of DokuWiki
installations will be affected at all.
For affected installations the risk is high if users with access to the
API are not to be trusted.
Thus the overall severity of medium.

Resolution:

Installations applying this commit are safe. A hotfix is about to be
released. Meanwhile users are advised to disable the XMLRPC API in the
config manager.

show more ...


# 1fa1d6bc 24-Feb-2015 Cyril Duchon-Doris <Cyril.Duchon-Doris@telecom-paristech.org>

Fixing bugs found by scrutinizer


# 6d2588b6 24-Feb-2015 Cyril Duchon-Doris <Cyril.Duchon-Doris@telecom-paristech.org>

Adding listAcls to the XMLRPC API as suggested in Issue #1054


# 42ea7f44 01-Oct-2014 Gerrit Uitslag <klapinklapin@gmail.com>

Many PHPDocs, some unused and dyn declared vars

many PHPDocs
some unused variables
some dynamically declared variables declared


# 59bc3b48 29-Sep-2014 Gerrit Uitslag <klapinklapin@gmail.com>

more scrutinizer issue improvements


# b8983d3a 21-Aug-2013 Matt Perry <matt@mattperry.com>

Fix CodeSniffer violations

Remove whitespace from end of lines to reduce the number of CodeSniffer
violations.


# 1b7fc214 30-Jul-2013 Mohamed Amine BERGAOUI <mabergaoui@gmail.com>

corrected coding style, deleted ?>, renamed function keys and used plugin_load


# 9f8068d2 30-Jul-2013 Mohamed Amine BERGAOUI <mabergaoui@gmail.com>

moving ACL remote functions to the ACL plugin