Matias Griese
9d21a98f61
Theme update - custom files overwritten #2135
2021-04-29 14:58:48 +03:00
Matias Griese
1b26b4ca7d
Fixed permission check for configuration save [ #2130 ]
2021-04-23 11:21:41 +03:00
Djamil Legato
438c9716cc
Better Pages default permissions
2021-04-22 11:57:40 -07:00
Matias Griese
c097eee87f
Fixed error reporting for AJAX tasks if user has no permissions
2021-04-15 10:11:04 +03:00
Matias Griese
7ed36e462e
Fixed error reporting for AJAX tasks if user has no permissions
2021-04-14 21:43:40 +03:00
Matias Griese
cde46a2eb0
Regression: Fixed broken plugin/theme installer in admin
2021-04-14 13:54:01 +03:00
Matias Griese
9383007b93
Better document admin tasks
2021-04-14 13:40:02 +03:00
Matias Griese
1acb94e857
Fixed error message when user clicks logout link after his session has been expired
2021-04-13 10:16:17 +03:00
Matias Griese
da8a7b574c
Improve ACL checks for the tasks
2021-04-12 22:06:43 +03:00
Matias Griese
9108a4a85f
Fixed broken 2FA login when site is not configured to use Flex Users [ #2109 ]
2021-04-08 10:56:18 +03:00
Matias Griese
9fca08ab43
Regression: Fixed broken 2FA form [ #2109 ]
2021-04-07 14:14:04 +03:00
Matias Griese
58e2c6cc55
Change nonce expiration message
2021-03-31 11:48:15 +03:00
Matias Griese
f36b244198
Include query param task into task checks
2021-03-26 18:15:42 +02:00
Matias Griese
aa4f80eec1
Greatly improve login related actions for Admin
...
* Better isolate admin to prevent session related vulnerabilities
* Removed support for custom login redirects for improved security
* Shorten forgot password link lifetime from 7 days to 1 hour
* Fixed login related pages being accessible from admin when user has logged in
* Fixed admin user creation and password reset allowing unsafe passwords
* Fixed missing validation when registering the first admin user
* Fixed reset password email not to have session specific token in it
2021-03-26 14:39:37 +02:00
Matias Griese
b3d66b3d3a
Rename internal save methods
2021-03-19 18:06:24 +02:00
Matias Griese
b7271bc424
Regression: Fixed enabling/disabling plugin or theme corrupting configuration
2021-02-19 22:04:04 +02:00
Matias Griese
7832d6992e
Fixed ACL for users with mixed case usernames [ #2073 ]
2021-02-18 16:22:55 +02:00
Matias Griese
64e41b034e
Fixed fatal error in admin if POST request has data in it [ #2074 ]
2021-02-18 15:33:38 +02:00
Matias Griese
a8983a003d
Fixed ACL for Configuration tabs [ #771 ]
2021-02-10 15:26:02 +02:00
Matias Griese
417d82769b
Fixed onAdminAfterAddMedia event always pointing to the home page [ #1905 ]
2021-02-10 13:08:34 +02:00
Matias Griese
725ed07ad9
Fixed onAdminAfterDelMedia event always pointing to home page [ #1905 ]
2021-02-10 12:57:43 +02:00
Matias Griese
6328489170
Provide media object and filename in onAdminAfterDelMedia event [ #1905 ]
2021-02-10 12:40:25 +02:00
Matias Griese
2223b2eb73
Fixed deleting list field options completely, didn't save changes [ #2056 ]
2021-02-08 21:30:37 +02:00
Matias Griese
ad5d3a3829
Improve flash file error detection
2021-02-08 17:25:32 +02:00
Matias Griese
905a2a299f
Fixed case-sensitive accept in filepicker field
2021-02-04 17:08:05 +02:00
Matias Griese
01568544b5
Fixed admin style compilation failing to save CSS if assets folder does not exist
2021-01-21 14:44:41 +02:00
Matias Griese
5ed810a2ab
Fixed fatal error when moving a page using the old implementation [ #2019 ]
2021-01-18 12:40:13 +02:00
Matias Griese
de3a557b80
Display controller exceptions in debugger
2021-01-18 12:05:24 +02:00
Matias Griese
1d669c5fb9
Minor code improvements
2021-01-08 18:57:41 +02:00
Djamil Legato
72116dcbca
Fixed notifications that would not be remembered as hidden + various improvements
2020-12-21 15:29:42 -08:00
Djamil Legato
06719a23dd
Properly exit the nested foreach when a matching dependency is found
2020-12-21 10:55:56 -08:00
Matias Griese
d9c73e2edb
Post merge conflicts
2020-12-01 09:51:43 +02:00
Matias Griese
432ef4bb1a
Composer update after merge
2020-12-01 09:37:58 +02:00
Matias Griese
be6428922d
Merge branch 'develop' of github.com:getgrav/grav-plugin-admin into 1.10
...
Conflicts:
admin.php
classes/plugin/AdminController.php
composer.lock
vendor/composer/autoload_classmap.php
vendor/composer/autoload_psr4.php
vendor/composer/autoload_real.php
vendor/composer/autoload_static.php
vendor/composer/installed.json
2020-12-01 09:24:05 +02:00
Matias Griese
ddc85f3b89
Merge branch 'develop' of github.com:getgrav/grav-plugin-admin into 1.10
2020-11-25 23:15:08 +02:00
Djamil Legato
a8bd391b78
Forward a sid to GPM when downloading a premium package
2020-10-29 15:25:40 -07:00
Djamil Legato
4e45a22837
Minor wording change for unauthorized downloads
2020-10-28 11:11:09 -07:00
Andy Miller
d063ac669b
Cleaner error messages
2020-09-03 22:28:47 -06:00
Andy Miller
c7fe6be9de
remove filename, not used
2020-09-03 18:14:36 -06:00
Matias Griese
04b17d6019
More multi-site routing fixes
2020-09-02 12:43:36 +03:00
Matias Griese
8a6f98b7bf
Fixed bad redirection after successful admin login in subdirectory multisite [ #1487 ]
2020-08-31 22:59:22 +03:00
Matias Griese
6bcc5f7636
Fixed a glitch which allows user to delete entire pages directory, Admin 1.10 edition [ #1941 ]
2020-08-28 13:38:58 +03:00
Matias Griese
44dca2df75
Made all the onAdmin CRUD events to pass object (and backwards compatible page) to make them easier to use
2020-08-28 12:32:45 +03:00
Matias Griese
ae6d972d26
Fixed bad 'use ...\UserObject;' statement in Admin
2020-07-03 11:44:05 +03:00
Andy Miller
1998a40e4c
Fix for deleting files from plugin configurations
...
Signed-off-by: Andy Miller <rhuk@mac.com >
2020-06-07 13:46:38 -06:00
Andy Miller
e9adc8f8f3
renamed markdownEditor->contentEditor
2020-05-26 08:19:26 -06:00
Andy Miller
6f8b5de163
new onAdminListMarkdownEditors event
2020-05-25 14:04:01 -06:00
Matias Griese
16fb712770
Do not use $pages->dispatch() to find a page, it redirects!
2020-05-22 20:06:40 +03:00
Andy Miller
0cfc7e031c
Fixes for broken parents field
2020-05-22 10:32:30 -06:00
Andy Miller
70a417d52f
Oops, removed by mistake
2020-05-12 18:08:22 -06:00