Commit Graph

1691 Commits

Author SHA1 Message Date
Julio Cesar Laura
ff6ff61c00 BUG 15419 Notificaciones incorrectas aplicando PPP_FAILED_LOGINS SOLVED
- The message was overwrited with the standard message
- Now the message is displayed correctly and I made some improvements in the PPP functionality
2014-07-11 12:07:24 -04:00
Erik Amaru Ortiz
9839edbaf1 little validation added 2014-07-08 13:37:47 -04:00
Erik Amaru Ortiz
93fa36fd95 little validation added 2014-07-08 13:37:41 -04:00
Erik Amaru Ortiz
b751eb7126 Merged in cochalo/processmaker (pull request #583)
Correccion de errores stdclass
2014-07-07 09:19:49 -04:00
julceslauhub
3df37f7402 Merge pull request #2493 from marcoAntonioNina/BUG-14986
BUG-14986 Authorization Bypass via Forceful Browsing IMPROVEMENT
2014-07-03 16:44:19 -04:00
Julio Cesar Laura
7b4804cb09 Merge remote branch 'upstream/master' 2014-07-03 16:37:34 -04:00
Marco Antonio Nina
b4ff11ddec BUG-14986 Authorization Bypass via Forceful Browsing IMPROVEMENT 2014-07-03 16:37:24 -04:00
jennylee
864d73cf04 LOGINFAILED LOG
Se aumento 'date' para el registro del log en la clase Logger (class.logger.php) y se quito el date en los mensajes enviados a dicha clase.

Cuando el usuario falla 3 veces consecutivas el logeo, se crea si no existiese, el file shared/log/loginFailed.log y se agrega un nuevo registro con los siguientes datos:

2014-07-02 16:55:22 | Many failed authentication attempts for USER: admin | IP: 192.168.10.109 | WS: dmuz | Browser: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36
2014-07-03 14:58:53 -04:00
jennylee
83368cc38e LOGINFAILED LOG
Se aumento 'date' para el registro del log en la clase Logger (class.logger.php) y se quito el date en los mensajes enviados a dicha clase.

Cuando el usuario falla 3 veces consecutivas el logeo, se crea si no existiese, el file shared/log/loginFailed.log y se agrega un nuevo registro con los siguientes datos:

2014-07-02 16:55:22  |  Many failed authentication attempts for USER: admin  |  IP: 192.168.10.109  |   WS: dmuz  |  Browser: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36
2014-07-03 10:32:25 -04:00
Brayan Osmar Pereyra Suxo
3335e99e9d Correccion de errores stdclass 2014-07-03 09:45:15 -04:00
jennylee
f77fe56284 LOGINFAILED LOG
Cuando el usuario falla 3 veces consecutivas el logeo, se crea si no existiese, el file shared/log/loginFailed.log y se agrega un nuevo registro con los siguientes datos:

2014-07-02 16:55:22  |  Many failed authentication attempts for USER: admin  |  IP: 192.168.10.109  |   WS: dmuz  |  Browser: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36
2014-07-02 17:07:33 -04:00
Julio Cesar Laura
a0a6e37f97 Merge remote branch 'upstream/master' 2014-06-26 16:51:24 -04:00
julceslauhub
553bf33ae6 Merge pull request #2479 from marcoAntonioNina/BUG-15276
BUG-15276 Error al ejecutar un triggers despues de... SOLVED
2014-06-26 16:08:15 -04:00
Marco Antonio Nina
4f2bdc2c3f Improvement changed comment 2014-06-26 15:43:07 -04:00
Marco Antonio Nina
c418f8b793 BUG-15276 Error al ejecutar un triggers despues de... SOLVED
- the variable trigger_debug_session was empty.
- A validation was added for load variable in file cases_SaveData.php.
2014-06-26 14:32:15 -04:00
julceslauhub
f9d6a04f91 Merge pull request #2474 from marcoAntonioNina/BUG-14988
BUG-14988 Administrative Interfaces are Accessible... IMPROVEMENT
2014-06-25 12:09:35 -04:00
Marco Antonio Nina
592da16515 BUG-14988 Administrative Interfaces are Accessible... IMPROVEMENT
- Change of variable to uppercase.
2014-06-25 08:50:01 -04:00
Luis Fernando Saisa Lopez
ddb7883e68 BUG 15196 "You are able to select various user..." SOLVED
- You are able to select various user re re-assign task
- Problema resuelto, cuando se aplica "Reassign" de una tarea, de la lista que aparece para reasignar la tarea se podra
  seleccionar solo a un usuario de la lista.
2014-06-24 17:04:08 -04:00
julceslauhub
c6f926ef83 Merge pull request #2467 from marcoAntonioNina/BUG-14986
BUG-14986 Authorization Bypass via Forceful Browsing IMPROVEMENT
2014-06-24 14:19:32 -04:00
Marco Antonio Nina
0041f066af BUG-14988 Administrative Interfaces are Accessible from the Internet SOLVED 2014-06-23 15:12:57 -04:00
Luis Fernando Saisa Lopez
451326b6ec BUG 15195 "User appear more than once in the..." SOLVED
- User appear more than once in the Process Supervisor window
- Problema resuelto, cuando se elimina a un usuario por ADMIN>USERS>Users, este usuario puede se eliminado sin restricciones
  aunque el usuario este asignado como supervisor de un proceso lo cual no es correcto.
  Se hace una validacion que verifica si el usuario esta asignado como supervisor le saldra un mensaje de confirmacion
  que indica si deseea eliminar el usuario de todas maneras. Si la respuesta es Si, se eliminara de la lista de usuarios
  y de la lista de usuarios asignados como supervisores.
2014-06-23 14:09:43 -04:00
Marco Antonio Nina
2cdd7c1a02 BUG-14986 Authorization Bypass via Forceful Browsing IMPROVEMENT 2014-06-20 16:08:47 -04:00
Luis Fernando Saisa Lopez
e70916ea97 BUG 15195 "User appear more than once in the..." SOLVED
- User appear more than once in the Process Supervisor window
- Problema resuelto, cuando se elimina a un usuario por ADMIN>USERS>Users, este usuario puede se eliminado sin restricciones
  aunque el usuario este asignado como supervisor de un proceso lo cual no es correcto.

  Se hace una validacion que verifica si el usuario esta asignado como supervisor le saldra un mensaje de confirmacion
  que indica si deseea eliminar el usuario de todas maneras. Si la respuesta es Si, se eliminara de la lista de usuarios
  y de la lista de usuarios asignados como supervisores.
2014-06-20 13:03:57 -04:00
Julio Cesar Laura
cc6e1cc16a Merge remote branch 'upstream/master' 2014-06-18 14:59:54 -04:00
julceslauhub
621c7b4436 Merge pull request #2463 from marcoAntonioNina/BUG-15237
BUG-15237 Task Information on Case Information Menu not working SOLVED
2014-06-18 14:57:54 -04:00
Marco Antonio Nina
8efd7e5b78 BUG-15237 Task Information on Case Information Menu not working SOLVED
- For the task completed the index and task_uid was wrong.
- A validation was added looking those id's, in file cases_Open.php.
- A validation was added for case paused.
2014-06-18 11:51:39 -04:00
Marco Antonio Nina
a25c04443b BUG-15237 Task Information on Case Information Menu not working SOLVED
- For the task completed the index and task_uid was wrong.
- A validation was added looking those id's, in file cases_Open.php.
2014-06-18 11:13:46 -04:00
Julio Cesar Laura
420473f339 Merge code from github to bitbucket 2014-06-17 2014-06-17 12:30:52 -04:00
julceslauhub
8ad545a2a4 Merge pull request #2449 from gproly/BUG-14775
BUG-14775 In the source code /workflow/engine/classes/model/UsersPropert...
2014-06-16 13:32:41 -04:00
Luis Fernando Saisa Lopez
53a58a54b2 BUG 15208 "Problemas con los Servicios Web WSDL..." SOLVED
- Problemas con los Servicios Web WSDL de PM.
- Se agrega el parametro "$params->taskId" en el archivo mencionado en el presente bug, en el metodo "NewCaseImpersonate",
  que contiene la siguiente linea de codigo:

  $res = $ws->newCaseImpersonate($params->processId, $params->userId, $params->variables, $params->taskId);

  Disponible para la version 2.5.3 de ProcessMaker.
2014-06-16 12:43:25 -04:00
Roly Rudy Gutierrez Pinto
9a5fffa7e4 BUG-14775 In the source code /workflow/engine/classes/model/UsersProperties.php line 153-160 variable $iLength is obtained by calculating the number of characters in the password, if the password is valid variable $aErrors no longer sets the corresponding flag to activate the validators in the Windows password change. IMPROVEMENT. 2014-06-12 17:46:42 -04:00
Roly Rudy Gutierrez Pinto
cd92610a59 BUG-14775 In the source code /workflow/engine/classes/model/UsersProperties.php line 153-160 variable $iLength is obtained by calculating the number of characters in the password, if the password is valid variable $aErrors no longer sets the corresponding flag to activate the validators in the Windows password change. IMPROVEMENT. 2014-06-12 16:02:32 -04:00
Marco Antonio Nina
4143147bd6 BUG-15029 Improvement called function Rename Folder broked the security 2014-06-12 13:46:14 -04:00
Marco Antonio Nina
83de02017b BUG-15172 The folders in the tree are not sorted alphabetically SOLVED
- The parameter sort was not set.
- the parameter setting in file appFolderAjax.php
2014-06-10 16:50:46 -04:00
julceslauhub
535fcedd60 Merge pull request #2442 from julceslauhub/master
Improvements in listbox field and in the security issue RW-152-1
2014-06-10 16:42:03 -04:00
Julio Cesar Laura
8999f7baa4 Improvements in listbox field and in the security issue RW-152-1 2014-06-10 16:40:33 -04:00
Erik Amaru Ortiz
7333cf1444 Oauth2 Registering and Access Management is complete now.
- User can register applications and manage them
- User can manage access tokens from interface on profile menu
2014-06-10 13:03:47 -04:00
Luis Fernando Saisa Lopez
f0721fdb03 BUG 15012 "When creating a dynaform with the character..." SOLVED
- When creating a dynaform with the character "&", the field handlers not working.
- Problema resuelto, el problema que se teníera lo siguiente cuando se utiliza el "&" en el tílo de un dynaform,
  cuando se enviaba los datos via GET, el "&" lo interpretaba como un separador de variables y esto ocasionaba la
  division de los datos que se enviaba.	Se valida los datos enviados via GET codificáolos y al recibir estos datos
  se los decodifica.
2014-06-10 09:57:44 -04:00
Julio Cesar Laura
e85997738b Merge code from github.com to bitbucket repo 2014-06-05 2014-06-05 16:30:19 -04:00
jennylee
98b138d5be BUG-15087 User Owner Field is Erased.
Problem:
Case 1: The same user 'A', creates and imports the process, using the option: "Update the current process...".

 Result: The user that created the process, user A in the example, is allways the User Owner of the process.

Case 2: User 'A' creates the process, and user 'B' imports the process, using the option: "Update the current process...".

 Result: The user that created the process, user A in the example, is allways the User Owner of the process.

Case 3: User 'A' creates the process, then this user 'A' is deleted, and user 'B' imports the process, using the option: "Update the current process...".

 Result: The User Owner is showed empty.

 Razon: When the user 'A' (the one that created the process) is deleted, the delete is only logical not physical in the db, and it is updated with the Status 'CLOSED' and the username of this user is changed to an empty string " ". So, when the process is updated the username is copy like it is in the db, and copy into the User Owner field, showing the empty string " ".

Solution:
A validation was added asking if the user exist, if this dosen't the User Owner is changed to the current user logged, and the same if the user exist but his status is CLOSED.
2014-06-05 16:15:49 -04:00
Luis Fernando Saisa Lopez
082e72d4e8 BUG 15012 "When creating a dynaform with the character..." SOLVED
- When creating a dynaform with the character "&", the field handlers not working.
- Problema resuelto, el problema que se teníera lo siguiente cuando se utiliza el "&" en el tílo de un dynaform,
  cuando se enviaba los datos via GET, el "&" lo interpretaba como un separador de variables y esto ocasionaba la
  division de los datos que se enviaba.	Se valida los datos enviados via GET codificáolos y al recibir estos datos
  se los decodifica
2014-06-03 14:30:20 -04:00
Julio Cesar Laura
47c46083a6 Merge remote branch 'upstream/master' 2014-06-02 16:20:20 -04:00
Julio Cesar Laura
022e2a8248 Merge remote branch 'upstream/master' 2014-06-02 16:19:05 -04:00
Roly Rudy Gutierrez Pinto
b390930882 Implementation of processmap in tracker cases. 2014-05-27 10:33:26 -04:00
Marco Antonio Nina
8fc840d829 BUG-15029 We can`t rename a folder in Documents SOLVED
- Error in position validate "function_exists".
- Change of position of validation in file appFolderAjax.php.
2014-05-26 09:25:58 -04:00
Julio Cesar Laura
33fb82f376 Merge code github > bitbucket 2014-05-23 16:35 2014-05-23 16:32:18 -04:00
Marco Antonio Nina
bc3a75c852 BUG-15020 Pagination toolbar is not refreshing when when... SOLVED
- The search was done locally.
- the criteria was added in order to make the search by filename and user.
2014-05-23 10:53:38 -04:00
julceslauhub
b5e9beefa2 Merge pull request #2417 from luisfernandosl/BUG-14056-3
BUG 14056 "Oracle Connection Parameters with TNS" SOLVED
2014-05-22 16:51:55 -04:00
Luis Fernando Saisa Lopez
c935c261b0 BUG 14056 "Oracle Connection Parameters with TNS" SOLVED
- Oracle Connection Parameters with TNS.
- Problema resuelto, en DATABASE CONNECTIONS al hacer click en New, en el dynaform "Add new Database Source" se agrega
  dos campos un dropdown "Select Connection Type" con dos opciones "NORMAL y TNS" y el campo de tipo "TNS", estos nuevos
  campos se muestran cuando se selecciona la opcion en engine "oracle" si es en otro caso se ocultaran. Tambien se adiciona
  dos nuevos campos en la tabla "DB_SOURCE" que son: "DBS_CONNECTION_TYPE" y "DBS_TNS".
  Cuando se selecciona "oracle" y tipo de conexion "TNS", al llenar los datos al dynaform y hacer click en el boton
  "test connection" realizara la prueba con exito o falla.
  Cuando se selecciona "oracle" y tipo de conexion "NORMAL", al llenar los datos al dynaform y hacer click en el boton
  "test connection" realizara la conexion tal como se hacia anteriomente.
2014-05-22 10:09:33 -04:00
Marco Antonio Nina
3b594a573d BUG-14053 El ordenamiento de archivos no se realiza... SOLVED
- El ordenamiento de las columnas no tenian una busqueda asignada.
- Se habilitaron solo dos columnas para el ordenamiento "Name, Modified".
- Se cambio el criteria para que acepte esos parametros en el archivo AppFolder.php
2014-05-21 16:11:32 -04:00