]> WPIA git - gigi.git/commit
add: defense-in-depth mechanism to prevent unauthorized adding of groups
authorFelix Dörre <felix@dogcraft.de>
Mon, 22 Aug 2016 09:23:02 +0000 (11:23 +0200)
committerFelix Dörre <felix@dogcraft.de>
Tue, 23 Aug 2016 19:38:02 +0000 (21:38 +0200)
commitd0470c5987aaecbc444c7100319df69b6f740680
treeb2947b0ecb27cf5bb256c83c377990f4664608bd
parent40b66049e1d0b738f654a92176e5cb8ffc8a9665
add: defense-in-depth mechanism to prevent unauthorized adding of groups

enforce that users must not add anyone to support-managed groups

Change-Id: I284842efba231ed7733837226626d80877e10cd7
23 files changed:
src/org/cacert/gigi/dbObjects/Group.java
src/org/cacert/gigi/dbObjects/SupportedUser.java
src/org/cacert/gigi/dbObjects/User.java
src/org/cacert/gigi/output/GroupSelector.java
tests/org/cacert/gigi/TestOrga.java
tests/org/cacert/gigi/TestUserGroupMembership.java
tests/org/cacert/gigi/api/IssueCert.java
tests/org/cacert/gigi/api/TestFindAgent.java
tests/org/cacert/gigi/pages/account/TestCertificateRequest.java
tests/org/cacert/gigi/pages/admin/TestSEAdminNotificationMail.java
tests/org/cacert/gigi/pages/admin/TestSEAdminPageDetails.java
tests/org/cacert/gigi/pages/admin/TestSEAdminPageUserDomainSearch.java
tests/org/cacert/gigi/pages/admin/TestSEAdminPageUserMailSearch.java
tests/org/cacert/gigi/pages/admin/TestSEAdminTicketSetting.java
tests/org/cacert/gigi/pages/orga/TestOrgDomain.java
tests/org/cacert/gigi/pages/orga/TestOrgManagement.java
tests/org/cacert/gigi/pages/wot/TestTTP.java
tests/org/cacert/gigi/pages/wot/TestTTPAdmin.java
tests/org/cacert/gigi/testUtils/BusinessTest.java
tests/org/cacert/gigi/testUtils/ManagedTest.java
tests/org/cacert/gigi/testUtils/OrgTest.java
tests/org/cacert/gigi/testUtils/RestrictedApiTest.java
util-testing/org/cacert/gigi/pages/Manager.java