Rocket.Chat

Commit Graph

Author	SHA1	Message	Date
Marcelo Schmidt	70f5f79df8	Replaced old .admin is true by RocketChat.authz.hasRole(Meteor.userId(), 'admin')	11 years ago
Rodrigo Nascimento	8466c0f0e2	Improve method broadcastAuth	11 years ago
Rodrigo Nascimento	a12d87b08e	Allow calls on method "stream" with clientAddress	11 years ago
Rodrigo Nascimento	8321c6d314	Log connection when not auth	11 years ago
Rodrigo Nascimento	809a3a0e9f	Add option to show auth'd connections and remove some logs	11 years ago
Rodrigo Nascimento	27b6c5299f	Connect streams ordered by more recents	11 years ago
Rodrigo Nascimento	18bfbebe94	Add some logs for remote tests	11 years ago
Rodrigo Nascimento	b0e9b299e7	Add logs for unauthorized calls of broadcast method	11 years ago
George Secrieru	3f0a635159	Changing edit message logic based on Message_AllowEditing_BlockEditInMinutes value	11 years ago
Reid Wakida	fe1b88c2fa	Fix issue where the first inserted user is not assigned the 'admin' role. Modifies admin role assignment to check if the inserted user is the first user based on sorted query using "createdAt". Originally, the admin role assignment was done onCreateUser before the user record was inserted into the db. It assigned the 'admin' role to a user if no other user existed in the db. However, with the change to insertUserDoc, the 'admin' assignment is done AFTER the first user is inserted and the original query logic (check if any user exists) no longer applies	11 years ago
George Secrieru	8964610276	Preventing messages from being edited based on settings (should close #44 )	11 years ago
Marcelo Schmidt	5a7f2746db	Fix for race-condition on user creation that sometimes would not set user as admin	11 years ago
Rodrigo Nascimento	8cd55a0f75	Add auth for broadcast and prevent call from client	11 years ago
Marcelo Schmidt	139b2e1003	Fixed a security breach, discovered by Pete Corey.	11 years ago
Rodrigo Nascimento	8aab1ea51a	Remove empty line	11 years ago
Rodrigo Nascimento	007390a4f4	Move code to use originalMessage instead message	11 years ago
Rodrigo Nascimento	e9fbad715d	Remove unecessary code	11 years ago
Rodrigo Nascimento	e920f8089e	Verify is user can delete message getting the message from db before	11 years ago
Rodrigo Nascimento	65c8e83d36	Remove unused code	11 years ago
Reid Wakida	c2e6e0fa2c	Create RocketChat authorization package that handles role and permission based authorization Leverages alanning:roles package to associate a user to a role. Uses alanning:roles optional "group" parameter to limit the role's scope to either the global level or room level. The global level is applicable to users that can perform administrative functions. The room level is applicable to users that can perform room specific administrative functions (like a moderator). A role can have zero or more permissions. Permissions and their association to roles are defined by this package Authorization checks are based on whether or not the user has a role or permission. The roles, permissions, and their association are statically defined at this time. Eventually, there should be an API to dynamically create a role and associate it to static permission(s). Old 'isAdmin' and '.admin is true' checks have been replaced with corresponding hasPermission authorization checks. Additionally, code that automatically assigned admin privileges are updated to assign 'admin' role instead. channel/direct message/private group code checks authorization to edit properties (e.g. title) and edit/delete messages (regardless of the system level allow edit/delete settings). - user with 'admin' role are authorized to do anything - room creator is assigned 'moderator' role that can edit the room and edit/delete messages - members can only edit/delete their own messages IF system wide settings permit them to. v19 migration will - add 'admin' role to users with admin:true property - add 'moderator' role scoped to room for room creators - add 'user' role to all users. There are known issues unrelated to the changes made - If a user with edit/delete message room permissions logs out then a user without edit/delete message room permissions logs in, then they will see edit/delete icons. The server will deny execution - edit/delete icons are not reactive Thus if the system level allow edit/delete message setting is toggled, the icons will not reflect it. The server will deny execution.	11 years ago
Rodrigo Nascimento	30125f288f	Add option to try to automatically generate usernames for users when login from SAML	11 years ago
Diego Sampaio	c6f5aaf353	reverting some unwanted changes	11 years ago
Diego Sampaio	7d7be62247	renaming package external to livechat	11 years ago
S. Li	729f6fd4b2	fix null ptr in loadhistory #787	11 years ago
George Secrieru	4b6cb0821a	Adding extra line at EOF	11 years ago
George Secrieru	c7b87fb63b	Supporting Private Group reopening (Fixes #740 ) - Adding Private Groups list ("More groups") - Bug fixed: rocketchat_subscription "open" flag is now updated when user reopens a given room	11 years ago
Marcelo Schmidt	9b1e702a74	Flex tabs for message search and user info	11 years ago
Marcelo Schmidt	3b6d283122	Fixed, allowing delete message by admin	11 years ago
Marcelo Schmidt	691d61e207	Adds created at user info for admins	11 years ago
Rodrigo Nascimento	600fd068b9	Improve unread behaviour	11 years ago
Rodrigo Nascimento	5338578427	Add unread bar	11 years ago
westmakaha	aee0c93c57	fix edit msg with older mongodb - closes #731	11 years ago
Justin Ahn	031dccd647	adding in user icon in the desktop notifications	11 years ago
Aaron	8f89f76e0d	Initial archive / unarchive commands.	11 years ago
Rodrigo Nascimento	099fbff3ac	Close #510 ; Notify all about avatar changes	11 years ago
Aaron	f3c5e16ac7	Added Toggle for auto load image, also bandwidth override to enable/disable on mobile	11 years ago
Justin Ahn	1ccd5c3cac	using the validation version of the method	11 years ago
Rodrigo Nascimento	5e3d683285	Replace stream of deleted messages by Notifications stream	11 years ago
Rodrigo Nascimento	079dd23c73	Replace webrtc stream by Notifications stream	11 years ago
Rodrigo Nascimento	ca494c1b1b	Move Notify to inside package rockectchat-lib and renamte to Notifications	11 years ago
Justin Ahn	819db9aedd	adding the ability to edit usernames	11 years ago
Rodrigo Nascimento	f16c723e5d	Replace stream of typing by new Stream Notification system	11 years ago
Rodrigo Nascimento	8f021afde2	Improve classes of stream notifications	11 years ago
Rodrigo Nascimento	c750384e2c	Improve stream broadcast	11 years ago
graywolf336	b62b70da80	Allow the from email to be configurable. Use the site name as the from name	11 years ago
Rodrigo Nascimento	405c2b84c2	Improve stream classes	11 years ago
Rodrigo Nascimento	f68c674160	Add callbacks beforeJoinDefaultChannels, beforeCreateUser and afterCreateUser	11 years ago
Rodrigo Nascimento	de90a2d2c3	Redirect user to the defaultRoom if setted	11 years ago
Marcelo Schmidt	7fd6863434	Fixed not being able to re-open a direct message room after user has closed it.	11 years ago
Diego Sampaio	198a26f74f	code cleanup	11 years ago

1 2 3 4 5 ...

418 Commits (06328ec00a100cb706871276b2a5ea4ba93bccf9)