fernando/luos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18,558 Commits 1 Branch 0 Tags
d1f6a3126cddb3bf6be600151f58c264bea12df8
Commit Graph

3059 Commits

Author SHA1 Message Date
Roly Rudy Gutierrez Pinto
d1f6a3126c HOR-4133 2018-03-06 12:57:48 -04:00
Paula Quispe
50ab4cb5f0 HOR-4204 2018-03-06 12:55:49 -04:00
Paula Quispe
b59026fe51 Merged in bugfix/HOR-3612 (pull request #6190) 
HOR-3612

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
 2017-12-01 13:27:44 +00:00
Marco Antonio Nina Mena
aad576b550 HOR-4116 Output document Step shows Date in UTC format 
- Add timezone
 2017-11-28 13:40:30 -04:00
Marco Antonio Nina Mena
7891836488 Fix CR 2017-11-27 12:00:58 -04:00
Marco Antonio Nina Mena
9cff70c5b3 HOR-4122 When "Manager_Approval" is set like a variable name, this breaks the url encode/decode function used by ABE 
- Change sign plus in function encrypt and decrypt
 2017-11-24 13:39:33 -04:00
Paula Quispe
c6958575b7 HOR-3612 2017-11-22 09:49:41 -04:00
Paula Quispe
c7b6c4128c Merged in release/3.2.2 (pull request #6185) 
release/3.2.2

Approved-by: Paula Quispe <paula.quispe@processmaker.com>
 2017-11-17 11:36:40 +00:00
Paula Quispe
a6457b2211 HOR-3510 2017-11-09 13:47:44 -04:00
Paula Quispe
da21796794 HOR-3898 2017-11-09 09:49:43 -04:00
Marco Antonio Nina Mena
055a6d5c19 reverse change of triple equality 2017-10-31 08:08:22 -04:00
Paula Quispe
cb111091a6 Merged develop into bugfix/HOR-2572 2017-10-31 07:36:29 -04:00
Marco Antonio Nina Mena
eb323992b4 fix CR 2017-10-30 12:09:39 -04:00
Marco Antonio Nina Mena
33a6e236b9 HOR-4017 CLONE 3.2.2 - Unauthenticated download of any file from server with "processes/processes_GetFile" page + Path Traversal 
- Add validation path only PATH_DATA_MAILTEMPLATES or PATH_DATA_PUBLIC
 2017-10-30 08:31:21 -04:00
Marco Antonio Nina Mena
2845b37390 code style 2017-10-27 15:53:58 -04:00
Marco Antonio Nina Mena
b6de60dd78 HOR-2572 Unnecessary folder creation on files 
- Deleted code for creation of folder 'tmp'
 2017-10-27 15:18:04 -04:00
Marco Antonio Nina Mena
70a0106ee8 HOR-4005 Rename title of dialog from "Upload Variable" to "Select Variable" 
- Add label
 2017-10-27 14:17:11 -04:00
Paula Quispe
6d9e5cf7ec Merged in release/3.2.2 (pull request #6146) 
release/3.2.2

Approved-by: Paula Quispe <paula.quispe@processmaker.com>
 2017-10-26 12:07:07 +00:00
Paula Quispe
2936ce97f5 Code style 2017-10-25 16:12:42 -04:00
Paula Quispe
a64284be2c HOR-4009 2017-10-25 15:36:45 -04:00
Paula Quispe
db8c23a20e Merged in bugfix/HOR-3521-A (pull request #6117) 
HOR-3521

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
 2017-10-25 19:00:09 +00:00
Paula Quispe
81c90278bd release/3.2.2 to develop conflicts 2017-10-23 11:37:41 -04:00
Paula Quispe
9952cdb8ff Conflicts 2017-10-20 18:51:24 -04:00
dante
e9697990e6 moving file name sanitization to ouput document files only 2017-10-20 14:50:17 -04:00
dante
21e1912fd5 moving sanitization to file names of output documents only 2017-10-20 14:38:10 -04:00
davidcallizaya
ec6995972e HOR-3996 
Since the web entry is assigned to guest, it was not able to load the user information through
the PMfunctions because it is validated to not return guest information. Now it will load directly
from Users table.
 2017-10-20 12:02:13 -04:00
davidcallizaya
2a81bba175 HOR-3956 
Fix CR
 2017-10-20 12:00:11 -04:00
davidcallizaya
7d99f1e69e HOR-3956 
+ Enable access to guest user to use the PM_CASES.
+ Add PM_DASHBOARD permission to KPIs.
+ Add internal permission alias:
RBAC->userCanAccess()
     * Verify if the user has a right over the permission. Ex.
     *      $rbac->userCanAccess("PM_CASES");
     *
     * Alias of permissions:
     *      PM_CASES has alias: PM_GUES_CASE
     * This means that a role with PM_GUES_CASE could access like one with PM_CASES
     * unless the permission is required as strict, like this:
     *      $rbac->userCanAccess("PM_CASES/strict");
 2017-10-20 12:00:10 -04:00
davidcallizaya
c2bcc087eb HOR-3926 
Fixes

 Please enter the commit message for your changes. Lines starting
 2017-10-20 12:00:09 -04:00
Roly Rudy Gutierrez Pinto
465264d57c HOR-3926 2017-10-20 12:00:08 -04:00
Paula Quispe
dd317925c5 Merged in release/3.2.2 (pull request #6128) 
release/3.2.2

Approved-by: Paula Quispe <paula.quispe@processmaker.com>
 2017-10-20 12:47:58 +00:00
Marco Antonio Nina Mena
37b2a39c9f Merged in bugfix/HOR-3858 (pull request #6106) 
HOR-3858

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
Approved-by: Paula Quispe <paula.quispe@processmaker.com>
 2017-10-19 22:01:43 +00:00
Paula Quispe
b26beb72c4 HOR-3521 2017-10-17 13:52:26 -04:00
Marco Antonio Nina Mena
313103f591 Add realpath to variable File 2017-10-16 15:47:36 -04:00
Roly Rudy Gutierrez Pinto
6c96225ce2 HOR-3851 2017-10-13 11:05:39 -04:00
davidcallizaya
086cc31982 HOR-3921 
Fix CSRF security issue.
 2017-10-13 07:57:22 -04:00
Marco Antonio Nina Mena
c7e8614ada - sanitize field current_directory 2017-10-11 13:26:34 -04:00
Marco Antonio Nina Mena
45c6b0df57 - Fix path 2017-10-10 16:22:07 -04:00
Marco Antonio Nina Mena
99700467b8 HOR-3858 Unauthenticated download of any file from server with "processes/processes_GetFile" page + Path Traversal 
- Add validation path only PATH_DATA_MAILTEMPLATES or PATH_DATA_PUBLIC
- exists process uid
 2017-10-10 16:18:22 -04:00
Roly Rudy Gutierrez Pinto
c3f74fca4b HOR-3851 2017-10-10 12:41:15 -04:00
Roly Rudy Gutierrez Pinto
8ac8e50691 HOR-3851 2017-10-10 12:33:25 -04:00
Roly Rudy Gutierrez Pinto
216e2dca28 HOR-3851 2017-10-06 17:21:21 -04:00
Paula Quispe
53f6ea99b8 Merged in release/3.2.2 (pull request #6094) 
HOR-3951

Approved-by: Paula Quispe <paula.quispe@processmaker.com>
 2017-10-04 12:59:43 +00:00
davidcallizaya
a01d0af088 HOR-3951 
Fix import users from ldap: username case sensitive.
 2017-10-03 16:27:53 -04:00
Roly
ac313f342c Merged in bugfix/HOR-3221 (pull request #6052) 
HOR-3221

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
 2017-09-25 20:36:16 +00:00
hjonathan
ab672f93fb HOR-3543 
update

update
 2017-09-25 09:11:44 -04:00
jonathan Quispe
7964a5030e Merged in bugfix/HOR-3630 (pull request #6066) 
HOR-3630

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>
 2017-09-21 16:32:02 +00:00
Roly Rudy Gutierrez Pinto
2765e3aeec HOR-3221 improvement 2017-09-19 11:25:25 -04:00
Roly Rudy Gutierrez Pinto
59fc56265a HOR-3221 improvement 2017-09-19 11:19:45 -04:00
hjonathan
aef7405764 HOR-3630 2017-09-18 14:44:47 -04:00