24 Commits (master)

Author	SHA1	Message	Date
Matthew Wild	5ef6234248	mod_announce: Suppress luacheck warnings	2 years ago
Matthew Wild	a839446a32	mod_announce: Add shell commands and APIs for sending to all/online/roles	2 years ago
Kim Alvefur	98922d54b1	plugins: Prefix module imports with prosody namespace	3 years ago
Matthew Wild	d73714b4f4	Switch to a new role-based authorization framework, removing is_admin() ... We began moving away from simple "is this user an admin?" permission checks before 0.12, with the introduction of mod_authz_internal and the ability to dynamically change the roles of individual users. The approach in 0.12 still had various limitations however, and apart from the introduction of roles other than "admin" and the ability to pull that info from storage, not much actually changed. This new framework shakes things up a lot, though aims to maintain the same functionality and behaviour on the surface for a default Prosody configuration. That is, if you don't take advantage of any of the new features, you shouldn't notice any change. The biggest change visible to developers is that usermanager.is_admin() (and the auth provider is_admin() method) have been removed. Gone. Completely. Permission checks should now be performed using a new module API method: module:may(action_name, context) This method accepts an action name, followed by either a JID (string) or (preferably) a table containing 'origin'/'session' and 'stanza' fields (e.g. the standard object passed to most events). It will return true if the action should be permitted, or false/nil otherwise. Modules should no longer perform permission checks based on the role name. E.g. a lot of code previously checked if the user's role was prosody:admin before permitting some action. Since many roles might now exist with similar permissions, and the permissions of prosody:admin may be redefined dynamically, it is no longer suitable to use this method for permission checks. Use module:may(). If you start an action name with ':' (recommended) then the current module's name will automatically be used as a prefix. To define a new permission, use the new module API: module:default_permission(role_name, action_name) module:default_permissions(role_name, { action_name[, action_name...] }) This grants the specified role permission to execute the named action(s) by default. This may be overridden via other mechanisms external to your module. The built-in roles that developers should use are: - prosody:user (normal user) - prosody:admin (host admin) - prosody:operator (global admin) The new prosody:operator role is intended for server-wide actions (such as shutting down Prosody). Finally, all usage of is_admin() in modules has been fixed by this commit. Some of these changes were trickier than others, but no change is expected to break existing deployments. EXCEPT: mod_auth_ldap no longer supports the ldap_admin_filter option. It's very possible nobody is using this, but if someone is then we can later update it to pull roles from LDAP somehow.	4 years ago
Kim Alvefur	a2cfaf8c28	mod_announce: Silence luacheck warning about unused variable	6 years ago
Kim Alvefur	3bf9f59c00	mod_announce: Check for admin on current virtualhost instead of global (fixes #1365) (thanks yc)	7 years ago
Kim Alvefur	60f44b1556	mod_announce: Fix luacheck warnings	8 years ago
Kim Alvefur	6c922fe328	mod_announce: Depend on mod_adhoc for consistent behaviour (thanks meaz, Link Mauve)	8 years ago
Kim Alvefur	faea440e51	mod_announce: Remove unreachable return statement [luacheck]	8 years ago
Florian Zeitz	1d833bb807	Remove all trailing whitespace	13 years ago
Kim Alvefur	27dc3a5b9a	mod_announce, mod_auth_anonymous, mod_c2s, mod_c2s, mod_component, mod_iq, mod_message, mod_presence, mod_tls: Access prosody.{hosts,bare_sessions,full_sessions} instead of the old globals	13 years ago
Florian Zeitz	ddb2f794f7	mod_admin_adhoc, mod_announce: Explicitly specify possible actions for ad-hoc commands	14 years ago
Kim Alvefur	df70fc2508	mod_announce, mod_motd, mod_pubsub, mod_register, mod_watchregistrations, mod_welcome: Use module:send() instead of core_*_stanza()	14 years ago
Florian Zeitz	f76c2aa90b	mod_adhoc, mod_admin_adhoc, mod_announce: Use module:provides() to manage Ad-Hoc commands	14 years ago
Waqas Hussain	29fd792c7f	mod_announce: A little cleanup.	16 years ago
Waqas Hussain	6b4c9dd8c2	mod_announce: Removed unused variables.	16 years ago
Waqas Hussain	730fa22c6d	mod_announce: Changed a global variable to local.	16 years ago
Matthew Wild	e53c3dce37	mod_announce: Add ad-hoc command for sending announcements \o/	16 years ago
Waqas Hussain	7b1132921d	mod_announce: Fixed an edge case where non-admins attempting to announce would get two error replies.	16 years ago
Matthew Wild	2bc0606453	Update copyright headers for 2010	16 years ago
Matthew Wild	e45610ce6e	Add copyright header to those files missing one	17 years ago
Waqas Hussain	38fec5d17d	mod_announce: Work with non-local admins	17 years ago
Waqas Hussain	030772c85e	mod_announce: Use usermanager.is_admin to verify admin status	17 years ago
Matthew Wild	8441ed7821	mod_announce: New module to send a message to all online users	17 years ago