Commit Graph

156 Commits

Author SHA1 Message Date
Matias Griese
9d21a98f61 Theme update - custom files overwritten #2135 2021-04-29 14:58:48 +03:00
Matias Griese
1b26b4ca7d Fixed permission check for configuration save [#2130] 2021-04-23 11:21:41 +03:00
Djamil Legato
438c9716cc Better Pages default permissions 2021-04-22 11:57:40 -07:00
Matias Griese
c097eee87f Fixed error reporting for AJAX tasks if user has no permissions 2021-04-15 10:11:04 +03:00
Matias Griese
7ed36e462e Fixed error reporting for AJAX tasks if user has no permissions 2021-04-14 21:43:40 +03:00
Matias Griese
cde46a2eb0 Regression: Fixed broken plugin/theme installer in admin 2021-04-14 13:54:01 +03:00
Matias Griese
9383007b93 Better document admin tasks 2021-04-14 13:40:02 +03:00
Matias Griese
1acb94e857 Fixed error message when user clicks logout link after his session has been expired 2021-04-13 10:16:17 +03:00
Matias Griese
da8a7b574c Improve ACL checks for the tasks 2021-04-12 22:06:43 +03:00
Matias Griese
9108a4a85f Fixed broken 2FA login when site is not configured to use Flex Users [#2109] 2021-04-08 10:56:18 +03:00
Matias Griese
9fca08ab43 Regression: Fixed broken 2FA form [#2109] 2021-04-07 14:14:04 +03:00
Matias Griese
58e2c6cc55 Change nonce expiration message 2021-03-31 11:48:15 +03:00
Matias Griese
f36b244198 Include query param task into task checks 2021-03-26 18:15:42 +02:00
Matias Griese
aa4f80eec1 Greatly improve login related actions for Admin
* Better isolate admin to prevent session related vulnerabilities
* Removed support for custom login redirects for improved security
* Shorten forgot password link lifetime from 7 days to 1 hour
* Fixed login related pages being accessible from admin when user has logged in
* Fixed admin user creation and password reset allowing unsafe passwords
* Fixed missing validation when registering the first admin user
* Fixed reset password email not to have session specific token in it
2021-03-26 14:39:37 +02:00
Matias Griese
b3d66b3d3a Rename internal save methods 2021-03-19 18:06:24 +02:00
Matias Griese
b7271bc424 Regression: Fixed enabling/disabling plugin or theme corrupting configuration 2021-02-19 22:04:04 +02:00
Matias Griese
7832d6992e Fixed ACL for users with mixed case usernames [#2073] 2021-02-18 16:22:55 +02:00
Matias Griese
64e41b034e Fixed fatal error in admin if POST request has data in it [#2074] 2021-02-18 15:33:38 +02:00
Matias Griese
a8983a003d Fixed ACL for Configuration tabs [#771] 2021-02-10 15:26:02 +02:00
Matias Griese
417d82769b Fixed onAdminAfterAddMedia event always pointing to the home page [#1905] 2021-02-10 13:08:34 +02:00
Matias Griese
725ed07ad9 Fixed onAdminAfterDelMedia event always pointing to home page [#1905] 2021-02-10 12:57:43 +02:00
Matias Griese
6328489170 Provide media object and filename in onAdminAfterDelMedia event [#1905] 2021-02-10 12:40:25 +02:00
Matias Griese
2223b2eb73 Fixed deleting list field options completely, didn't save changes [#2056] 2021-02-08 21:30:37 +02:00
Matias Griese
ad5d3a3829 Improve flash file error detection 2021-02-08 17:25:32 +02:00
Matias Griese
905a2a299f Fixed case-sensitive accept in filepicker field 2021-02-04 17:08:05 +02:00
Matias Griese
01568544b5 Fixed admin style compilation failing to save CSS if assets folder does not exist 2021-01-21 14:44:41 +02:00
Matias Griese
5ed810a2ab Fixed fatal error when moving a page using the old implementation [#2019] 2021-01-18 12:40:13 +02:00
Matias Griese
de3a557b80 Display controller exceptions in debugger 2021-01-18 12:05:24 +02:00
Matias Griese
1d669c5fb9 Minor code improvements 2021-01-08 18:57:41 +02:00
Djamil Legato
72116dcbca Fixed notifications that would not be remembered as hidden + various improvements 2020-12-21 15:29:42 -08:00
Djamil Legato
06719a23dd Properly exit the nested foreach when a matching dependency is found 2020-12-21 10:55:56 -08:00
Matias Griese
d9c73e2edb Post merge conflicts 2020-12-01 09:51:43 +02:00
Matias Griese
432ef4bb1a Composer update after merge 2020-12-01 09:37:58 +02:00
Matias Griese
be6428922d Merge branch 'develop' of github.com:getgrav/grav-plugin-admin into 1.10
 Conflicts:
	admin.php
	classes/plugin/AdminController.php
	composer.lock
	vendor/composer/autoload_classmap.php
	vendor/composer/autoload_psr4.php
	vendor/composer/autoload_real.php
	vendor/composer/autoload_static.php
	vendor/composer/installed.json
2020-12-01 09:24:05 +02:00
Matias Griese
ddc85f3b89 Merge branch 'develop' of github.com:getgrav/grav-plugin-admin into 1.10 2020-11-25 23:15:08 +02:00
Djamil Legato
a8bd391b78 Forward a sid to GPM when downloading a premium package 2020-10-29 15:25:40 -07:00
Djamil Legato
4e45a22837 Minor wording change for unauthorized downloads 2020-10-28 11:11:09 -07:00
Andy Miller
d063ac669b Cleaner error messages 2020-09-03 22:28:47 -06:00
Andy Miller
c7fe6be9de remove filename, not used 2020-09-03 18:14:36 -06:00
Matias Griese
04b17d6019 More multi-site routing fixes 2020-09-02 12:43:36 +03:00
Matias Griese
8a6f98b7bf Fixed bad redirection after successful admin login in subdirectory multisite [#1487] 2020-08-31 22:59:22 +03:00
Matias Griese
6bcc5f7636 Fixed a glitch which allows user to delete entire pages directory, Admin 1.10 edition [#1941] 2020-08-28 13:38:58 +03:00
Matias Griese
44dca2df75 Made all the onAdmin CRUD events to pass object (and backwards compatible page) to make them easier to use 2020-08-28 12:32:45 +03:00
Matias Griese
ae6d972d26 Fixed bad 'use ...\UserObject;' statement in Admin 2020-07-03 11:44:05 +03:00
Andy Miller
1998a40e4c Fix for deleting files from plugin configurations
Signed-off-by: Andy Miller <rhuk@mac.com>
2020-06-07 13:46:38 -06:00
Andy Miller
e9adc8f8f3 renamed markdownEditor->contentEditor 2020-05-26 08:19:26 -06:00
Andy Miller
6f8b5de163 new onAdminListMarkdownEditors event 2020-05-25 14:04:01 -06:00
Matias Griese
16fb712770 Do not use $pages->dispatch() to find a page, it redirects! 2020-05-22 20:06:40 +03:00
Andy Miller
0cfc7e031c Fixes for broken parents field 2020-05-22 10:32:30 -06:00
Andy Miller
70a417d52f Oops, removed by mistake 2020-05-12 18:08:22 -06:00