Release 0.18.2

api/tacticalrmm/accounts/models.py

@@ -71,7 +71,7 @@ def mesh_user_id(self):
     @property
     def mesh_username(self):
         # lower() needed for mesh api
-        return f"{self.username.lower()}___{self.pk}"
+        return f"{self.username.replace(' ', '').lower()}___{self.pk}"
 
     @staticmethod
     def serialize(user):

api/tacticalrmm/agents/views.py

@@ -987,6 +987,8 @@ def bulk(request):
         debug_info={"ip": request._client_ip},
     )
 
+    ht = "Check the History tab on the agent to view the results."
+
     if request.data["mode"] == "command":
         if request.data["shell"] == "custom" and request.data["custom_shell"]:
             shell = request.data["custom_shell"]
@@ -1001,7 +1003,7 @@ def bulk(request):
             username=request.user.username[:50],
             run_as_user=request.data["run_as_user"],
         )
-        return Response(f"Command will now be run on {len(agents)} agents")
+        return Response(f"Command will now be run on {len(agents)} agents. {ht}")
 
     elif request.data["mode"] == "script":
         script = get_object_or_404(Script, pk=request.data["script"])
@@ -1016,7 +1018,7 @@ def bulk(request):
             env_vars=request.data["env_vars"],
         )
 
-        return Response(f"{script.name} will now be run on {len(agents)} agents")
+        return Response(f"{script.name} will now be run on {len(agents)} agents. {ht}")
 
     elif request.data["mode"] == "patch":
         if request.data["patchMode"] == "install":

api/tacticalrmm/core/mesh_utils.py

@@ -137,7 +137,7 @@ def add_users_to_node(self, *, node_id: str, user_ids: list[str]):
             "action": "adddeviceuser",
             "nodeid": node_id,
             "usernames": [s.replace("user//", "") for s in user_ids],
-            "rights": 3563736,
+            "rights": 4088024,
             "remove": False,
         }
         self.mesh_action(payload=payload, wait=False)

api/tacticalrmm/core/permissions.py

@@ -13,7 +13,11 @@ def has_permission(self, r, view) -> bool:
 
 class URLActionPerms(permissions.BasePermission):
     def has_permission(self, r, view) -> bool:
-        return _has_perm(r, "can_run_urlactions")
+        if r.method in {"GET", "PATCH"}:
+            return _has_perm(r, "can_run_urlactions")
+
+        # TODO make a manage url action perm instead?
+        return _has_perm(r, "can_edit_core_settings")
 
 
 class ServerMaintPerms(permissions.BasePermission):

api/tacticalrmm/core/views.py

@@ -331,7 +331,7 @@ def delete(self, request, pk):
 
 
 class GetAddURLAction(APIView):
-    permission_classes = [IsAuthenticated, CoreSettingsPerms]
+    permission_classes = [IsAuthenticated, URLActionPerms]
 
     def get(self, request):
         actions = URLAction.objects.all()

api/tacticalrmm/requirements.txt

@@ -8,7 +8,7 @@ channels_redis==4.2.0
 cryptography==42.0.5
 Django==4.2.11
 django-cors-headers==4.3.1
-django-filter==24.1
+django-filter==24.2
 django-rest-knox==4.2.0
 djangorestframework==3.14.0
 drf-spectacular==0.27.1
@@ -33,14 +33,14 @@ twilio==8.13.0
 urllib3==2.2.1
 uvicorn[standard]==0.29.0
 uWSGI==2.0.24
-validators==0.22.0
+validators==0.24.0
 vine==5.1.0
 websockets==12.0
 zipp==3.18.1
 pandas==2.2.1
 kaleido==0.2.1
 jinja2==3.1.3
-markdown==3.5.2
-plotly==5.19.0
+markdown==3.6
+plotly==5.20.0
 weasyprint==61.2
 ocxsect==0.1.5

api/tacticalrmm/tacticalrmm/settings.py

@@ -21,14 +21,14 @@
 AUTH_USER_MODEL = "accounts.User"
 
 # latest release
-TRMM_VERSION = "0.18.1"
+TRMM_VERSION = "0.18.2"
 
 # https://github.com/amidaware/tacticalrmm-web
-WEB_VERSION = "0.101.43"
+WEB_VERSION = "0.101.44"
 
 # bump this version everytime vue code is changed
 # to alert user they need to manually refresh their browser
-APP_VER = "0.0.191"
+APP_VER = "0.0.192"
 
 # https://github.com/amidaware/rmmagent
 LATEST_AGENT_VER = "2.7.0"
@@ -43,7 +43,7 @@
 # GitHub version to download. The file will be downloaded from GitHub, extracted and installed.
 # Version to download. If INSTALL_NUSHELL_URL is not provided, the file will be downloaded from GitHub,
 # extracted and installed.
-INSTALL_NUSHELL_VERSION = "0.91.0"
+INSTALL_NUSHELL_VERSION = "0.92.1"
 # URL to download directly. This is expected to be the direct URL, unauthenticated, uncompressed, ready to be installed.
 # Use {OS}, {ARCH} and {VERSION} to specify the GOOS, GOARCH and INSTALL_NUSHELL_VERSION respectively.
 # Windows: The ".exe" extension will be added automatically.
@@ -64,7 +64,7 @@
 INSTALL_DENO = True
 # Version to download. If INSTALL_DENO_URL is not provided, the file will be downloaded from GitHub,
 # extracted and installed.
-INSTALL_DENO_VERSION = "v1.41.3"
+INSTALL_DENO_VERSION = "v1.42.1"
 # URL to download directly. This is expected to be the direct URL, unauthenticated, uncompressed, ready to be installed.
 # Use {OS}, {ARCH} and {VERSION} to specify the GOOS, GOARCH and INSTALL_DENO_VERSION respectively.
 # Windows: The ".exe" extension will be added automatically.