15 Commits (a56e7b85ba767d7cfc41509ee006125c53515421)

Author	SHA1	Message	Date
Marcelo Schmidt	ac51bce5ae	Fix mixed translations using TAPi18next.t instead of TAPi18n.__	10 years ago
Marcelo Schmidt	70f5f79df8	Replaced old .admin is true by RocketChat.authz.hasRole(Meteor.userId(), 'admin')	10 years ago
Reid Wakida	c2e6e0fa2c	Create RocketChat authorization package that handles role and permission ... based authorization Leverages alanning:roles package to associate a user to a role. Uses alanning:roles optional "group" parameter to limit the role's scope to either the global level or room level. The global level is applicable to users that can perform administrative functions. The room level is applicable to users that can perform room specific administrative functions (like a moderator). A role can have zero or more permissions. Permissions and their association to roles are defined by this package Authorization checks are based on whether or not the user has a role or permission. The roles, permissions, and their association are statically defined at this time. Eventually, there should be an API to dynamically create a role and associate it to static permission(s). Old 'isAdmin' and '.admin is true' checks have been replaced with corresponding hasPermission authorization checks. Additionally, code that automatically assigned admin privileges are updated to assign 'admin' role instead. channel/direct message/private group code checks authorization to edit properties (e.g. title) and edit/delete messages (regardless of the system level allow edit/delete settings). - user with 'admin' role are authorized to do anything - room creator is assigned 'moderator' role that can edit the room and edit/delete messages - members can only edit/delete their own messages IF system wide settings permit them to. v19 migration will - add 'admin' role to users with admin:true property - add 'moderator' role scoped to room for room creators - add 'user' role to all users. There are known issues unrelated to the changes made - If a user with edit/delete message room permissions logs out then a user without edit/delete message room permissions logs in, then they will see edit/delete icons. The server will deny execution - edit/delete icons are not reactive Thus if the system level allow edit/delete message setting is toggled, the icons will not reflect it. The server will deny execution.	11 years ago
Marcelo Schmidt	ac8a8bae94	Allow administrators to send e-mail invitations;	11 years ago
Marcelo Schmidt	c7407f1582	RocketChat.TabBar for managing flex tabs	11 years ago
Marcelo Schmidt	03cb945a30	Using FlexTab to control flex state	11 years ago
Marcelo Schmidt	2fe71b4df5	Fixes and closes #678 no user information on admin	11 years ago
Justin Ahn	6d221dc82c	changing username by admin	11 years ago
Marcelo Schmidt	f9d67947d7	Multiple small changes;	11 years ago
Marcelo Schmidt	0c8b087a84	Add services info to user info side nav; make all user info side navs use the same template	11 years ago
Marcelo Schmidt	82fa181705	User administration: edit user; set user as admin;	11 years ago
Marcelo Schmidt	ec2c31cbde	Button to make or remove user as admin	11 years ago
Marcelo Schmidt	a01622130c	Changes to user administration	11 years ago
Marcelo Schmidt	9a610329f1	Administration / Rooms	11 years ago