michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-10-31 07:30:39 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
25,971 Commits 11 Branches 97 Tags
dev/add-api-only-access
Commit Graph

15 Commits

Author SHA1 Message Date
Ilia Ross
045c7abfdf Fix privileged RPC username conversion checks 
Original fix 616547c26f protected normal user creation, but conversion could still create `root`, `admin`, or `sysadm`.

Similarly, conversion now alost skips these usernames unless the admin can edit ACLs.
 2026-10-13 14:31:33 +02:00
Ilia Ross
5e4b937410 Fix SQL and LDAP backend permission checks 
This patch fixes permission checks on the remaining SQL and LDAP backend endpoints.

Jamie, your original fix 3d0a9aeea8 onnly updated `save_sql.cgi`, but three related files still were accepting the unrelated password-edit permission.
 2026-10-13 14:17:55 +02:00
Ilia Ross
f220c99a10 Fix ACL tests 2026-07-15 14:06:03 +02:00
Jamie Cameron
f62fd9e23a Merge pull request #2789 from webmin/dev/download-target-check 
Add ACL controls for URL download destinations
 2026-07-14 10:09:40 -07:00
Ilia Ross
18a4d6a6df Fix to clarify Unix authentication mapping behavior 
https://github.com/webmin/webmin/issues/2791
 2026-07-14 12:46:15 +02:00
Ilia Ross
99f35fa38a Fix to move URL download destination controls to global ACL 2026-07-14 02:52:36 +02:00
Ilia Ross
c8fb79016c Fix ACL session lookups for HMAC session keys 
ⓘ Load Miniserv’s session HMAC key in ACL session helpers so session listing, lookup, and user switching continue to work with HMAC-hashed session DB keys.

https://forum.virtualmin.com/t/usermin-2-550-login-from-the-virtualmin-edit-users-page-stopped-working/137491/37?u=ilia
 2026-07-07 23:33:18 +02:00
Ilia Ross
de57c42f4a Fix to update nested group module access in parent order
Some checks failed
Tests / prove (push) Has been cancelled
Details
Package and upload artifacts / build (push) Has been cancelled
Details
2026-06-14 16:14:21 +02:00
Ilia Ross
ce998ac478 Add module access helpers 2026-06-14 16:00:41 +02:00
Joe Cooper
844b5f8174 Exclude ProhibitLeadingZeros from perlcritic, use .perlcriticrc 2026-05-19 20:40:29 -05:00
Joe Cooper
308cb0c71d perlcritic test and fixes 2026-05-19 19:53:15 -05:00
Joe Cooper
28ba5883ef Make test match code more clearly 2026-05-19 16:59:34 -05:00
Joe Cooper
1f8030a523 Also escape in clone path 2026-05-19 16:20:23 -05:00
Joe Cooper
ef49236f6a Fixes minor bugs surfaced by tests 2026-05-19 15:13:33 -05:00
Joe Cooper
78c9e8f2c5 Add some acl unit tests 2026-05-18 23:24:41 -05:00