Go to file

Victor Saisa Lopez 67a530e59e HOR-1360 "CLONE - Penetration test >> Privilege Escalation" SOLVED

Issue:
    CLONE - Penetration test >> Privilege Escalation
Cause:
    En el profile del usuario se puede asignar un valor al rol en un request POST
Solution:
    - Se hizo un analisis de la propuesta sobre "separar los archivos", este punto no se realizo, en vez de esto
      se separo los request con un switch-case
    - Existe duplicidad de codigo en los files "usersAjax.php" y "ProcessMaker\BusinessModel\User.php",
      por lo que ahora en el file "usersAjax.php" se llama a los metodos "create y update" de la clase "ProcessMaker\BusinessModel\User.php"
    - No se hizo cambios en front-end

2016-07-06 12:57:59 -04:00

features

It was fixed the 'error password' verification test in order to start a task with a wrong password.

2015-01-13 14:43:43 -04:00

framework/src

HOR-1249 Plugin's end points routes aren't generated when disabling/enabling a plugin.

2016-06-10 16:22:56 -04:00

gulliver

Merged in dheeyi/processmaker/HOR-1007 (pull request #4409 )

2016-06-16 16:48:18 -04:00

rbac

Merge remote-tracking branch 'upstream/3.1' into HOR-1007

2016-06-15 09:07:51 -04:00

tests

Merged in paulis/processmaker/HOR-1089 (pull request #4345 )

2016-06-03 10:12:55 -04:00

workflow

HOR-1360 "CLONE - Penetration test >> Privilege Escalation" SOLVED

2016-07-06 12:57:59 -04:00

.gitignore

OM-234:CLONE - Add a zip to ProcessMaker with the files required to run cases in Mobile

2016-02-04 15:09:26 -04:00

.travis.yml

adding travis file

2013-08-30 13:39:28 -04:00

apiary.apib

updating apiary docs source

2013-12-09 16:23:07 -04:00

behat.yml.dist

Some adjustments were added in order to resolve the input data in features related to database connections.

2014-12-09 10:43:39 -04:00

build-vendor.php

Adding the target source for Modernizr on template and buil-vendor.php file

2014-04-22 12:34:08 -04:00

build.xml

updating jenkins build file

2014-07-01 11:58:32 -04:00

composer.json

R-1234

2016-06-24 16:13:09 -04:00

composer.lock

R-1234

2016-06-24 16:13:09 -04:00

env_unittest.sh

Adding changes at time to resolve a comflict

2012-12-07 10:28:20 -04:00

INSTALL.txt

updating pm information files

2013-08-21 11:15:36 -04:00

LICENSE.txt

…

phpdox.xml

disabling phpunits in build.xml

2013-12-18 10:46:15 -04:00

phpunit.xml

Updating phpunit execution task on build.xml for jenkins, disabling colors

2014-04-03 12:59:26 -04:00

pmos.conf.example

HOR-754

2016-04-12 17:20:55 -04:00

processmaker

HOR-496 Restore en Windows> Al restaurar un ws en windows si completa la misma pero lanza unos errores Deprecated: mysql_connect():

2016-03-18 11:44:10 -04:00

processmaker.bat

…

Rakefile

OM-385: (Build-prod.zip) Al momento de instalar, se deberá dar los privilegios necesario para la descarga del archivo build-prod.zip

2016-03-11 15:31:31 -04:00

README.md

README.md edited online with Bitbucket

2015-06-29 14:53:31 +00:00

update

remove relative date in build-log.html

2014-03-13 16:32:13 -04:00

README.md

README

ProcessMaker "Michelangelo" v3.0

Overview

ProcessMaker is an open source, workflow management software suite, which includes tools to automate your workflow, design forms, create documents, assign roles and users, create routing rules, and map an individual process quickly and easily. It's relatively lightweight and doesn't require any kind of installation on the client computer. This file describes the requirements and installation steps for the server.

License

For further information visit: http://www.processmaker.com/

Languages

PHP 47.6%

JavaScript 39.1%

CSS 5.3%

HTML 2.9%

Gherkin 2.4%

Other 2.5%