Commit Graph

116 Commits

Author SHA1 Message Date
johnnyq 873df63c76 FEATURE: Added Credential Tagging Support 2024-10-30 14:40:02 -04:00
johnnyq ce9a0b903f Added Shared Item Recipient to Files, Documents and Credentials 2024-10-09 12:36:22 -04:00
wrongecho 654b590033 More enforcing user permissions 2024-09-28 20:04:33 +01:00
johnnyq 04f0905397 Added sort order visual cues to every listing 2024-09-20 20:00:21 -04:00
wrongecho 10fafacefe Custom Roles & Permissions
Initial enforcement of custom roles & permissions - only on some pages via GET for now.
2024-09-20 17:59:49 +01:00
wrongecho 64684e1248 Enforce CSRF for post/asset and post/account
Tiny bit of tidying
2024-09-08 22:52:38 +01:00
Marcus Hill f433535a8b Hide export function when module is empty 2024-09-04 08:52:08 +01:00
Johnny 3ecd05b963
Merge pull request #1020 from itflow-org/logging-credentials
Log when users navigate to the credentials page for a client
2024-09-03 23:26:16 -04:00
Marcus Hill 78eead24f7 Log when users navigate to the credentials page for a client 2024-08-30 22:49:18 +01:00
Marcus Hill a59a6ce2b1 Check that a credential is shared before attempting to display the details to prevent debug error messages 2024-08-30 22:45:03 +01:00
johnnyq 04f33ac375 Add Tooltips with expire time for shared links 2024-08-24 13:36:55 -04:00
johnnyq 5588ad953e Show if a Credential, Document or File is Shared by a Link, added a new status column 2024-08-24 13:30:01 -04:00
wrongecho 3f772f5a2f Bugfix: credentials
Fix an edge-case bug causing the user_encryption_session_key session cookie to not be set due to error output (when display PHP errors in browser is enabled). This means login credentials are still encrypted but cannot be decrypted properly by other users.
Prevent users creating new credentials if they do not have the correct cookie set.
2024-08-19 19:56:12 +01:00
Hugo Sampaio 79fdc979cf Update client_logins.php
Filter for Locations, based on Asset Location, if its related.
2024-07-22 09:50:41 -03:00
Hugo Sampaio 4e5fd048f7 uri dropdown 2024-07-02 10:34:56 -03:00
johnnyq 39ff97e9dd Restore option to share a password accidentally got wiped out when adding archive unarchive functions 2024-06-25 11:44:19 -04:00
johnnyq 64c5cbda52 Added Bulk Archive, UnArchive and Delete support to client vendors 2024-06-08 18:49:18 -04:00
johnnyq e8715979d5 Optimized Show/Unshow Archive Button Logic 2024-06-08 17:14:08 -04:00
johnnyq ee30b0b197 Added Bulk Archive, Unarchive, Delete actions to to logins 2024-06-08 16:00:29 -04:00
johnnyq b229349d8c Added / ID to Username field under credentials 2024-06-07 18:01:25 -04:00
Hugo Sampaio a96b3a30bd Update client_logins.php 2024-05-17 16:14:46 -03:00
Hugo Sampaio 4782892c8a using truncate function 2024-05-17 15:55:13 -03:00
Hugo Sampaio aef2cde9d2 Update client_logins.php 2024-05-16 11:14:20 -03:00
Hugo Sampaio 067d674c16 client_logins uri limit with ellipsis
limits long uri that may break lines in table
2024-05-16 10:48:41 -03:00
johnnyq 5370a70ab8 Renamed Login In the Frontend UI to Credentials to better fit other types of creds like API Keys, WiFi etc, also renamed the password field to password / key 2024-04-05 15:06:42 -04:00
johnnyq ca0eb4f261 Adjust media css listing to use divs instead of <p> tags 2024-03-20 18:11:37 -04:00
johnnyq bfe7c3098d Fix broken open uri 2024-03-20 17:31:04 -04:00
johnnyq 71c4537263 Client Logins Enhancement: Moved to the new media CSS Class, fixed password reveal would take you to the top of the page, moved open URI to the action bar as a button, fixed password alignment for copy to clipboard, description is now below the login name, made set button to type=button to prevent submits if wrapped in a form 2024-03-20 17:28:09 -04:00
johnnyq eeb5cece7c Remove SQL Left Join logins for assets as this is causing duplicate assets to appear if more than 1 related login exists, this break viewing login password for each asset, we will handle this a little differently 2024-03-03 13:03:49 -05:00
Marcus Hill ba0917e142 Logins JS Cleanup
- Remove old JS
- Standardize generate password JS style to match existing
- Move JS functions to own files
2024-01-22 21:25:21 +00:00
johnnyq 50002b0783 Added login uri 2, NAT IP and asset URI 2 to the UI, also created new tab in asset network and split form items between assignment and network 2024-01-15 13:50:46 -05:00
o-psi ebaa2a084a add readable password generation 2023-12-18 17:34:59 +00:00
johnnyq 48b153613f Changd Passwords to Logins, made Licenese icon consistent 2023-11-16 00:20:36 -05:00
johnnyq b26c1b28c3 Show Archived Items for licenses and password and moved import exports to New DropDown 2023-10-31 16:24:59 -04:00
o-psi 53c11edc8c Update constructs to not have parenthesis. 2023-10-20 15:25:52 -05:00
Marcus Hill 041fcb5613 Client logins/passwords - Ajax change + logging
A few changes to the credential manager TOTP function:

- The "hover to view" function now sends the login_id to ajax.php, rather than the TOTP secret
- Viewing the TOTP code is now audited in the logs under Login/View TOTP
2023-10-01 16:32:57 +01:00
johnnyq 9753b96fed Fix mismatch of word URI and URL to just URI, fix it to not removed Service:// 2023-09-09 23:57:55 -04:00
johnnyq 1bacabc72b Prevent duplicate sort, order and page GET VARs in the URL when Clicking to Sort a field or Clicking a page number. We now unset the GET VAR arrays before recreating the URL GET Strings 2023-07-08 14:40:00 -04:00
johnnyq e7572c9e8f Rename vars sb to sort, o to order, p to page. This makes the code easier to understand and brings consistency 2023-07-08 12:34:28 -04:00
johnnyq 473cf14610 Sort logins marked important always first 2023-07-07 16:50:22 -04:00
johnnyq 32c9a933ea Invoice Ticket design update, Added functionality for vendor ticket number, asset, login description and contact pin codes 2023-06-14 18:39:24 -04:00
johnnyq 40da8a2e69 Bold Important Passwords 2023-06-03 21:49:33 -04:00
johnnyq 37fb696e63 Replace the remaining php files with nullable_htmlentites() 2023-05-11 18:27:48 -04:00
johnnyq 7fed50eb73 Updated all Export CSV to Modals with export disclaimer 2023-04-23 16:12:18 -04:00
johnnyq 48fe49cf77 BREAKING CHANGES - MAKE FULL BACKUP BEFORE PROCEEDING - Requires Manual Intervention on files see Forum Post Make sure you run the Database update directly after update. This Removes Multi-Company Functionality. Fixes issues with Reponsive tables and bunch of other UI and small Fixes 2023-03-11 16:16:46 -05:00
johnnyq 29db5a19c9 Fixed undefine vendor_id and asset_id under tickets 2023-02-24 21:30:30 -05:00
johnnyq f7552cd25a Finished up santizeInput Conv and UI updates 2023-02-23 16:09:37 -05:00
Marcus Hill 5bb4296f14 Adjust core files to 4 spaces 2023-02-12 14:40:10 +00:00
Marcus Hill 615f317d2b General cleanup/formatting 2023-02-09 12:29:12 +00:00
Marcus Hill f92dc108e2 Tidy
- Move some scripts to their own js files
- Move some duplicate code blocks to functions
- General tidy & spacing cleanups (#538)
2023-02-04 22:09:56 +00:00