Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Introduce new User permission: Super User Access #4564

Closed
mattab opened this issue Jan 21, 2014 · 49 comments
Closed

Introduce new User permission: Super User Access #4564

mattab opened this issue Jan 21, 2014 · 49 comments
Assignees
@tsteur
Labels
Critical Indicates the severity of an issue is very critical and the issue has a very high priority. Enhancement For new feature suggestions that for example enhance Matomo's cabapilities..
Milestone
2.1

Comments

@mattab
Copy link
Member

mattab commented Jan 21, 2014

The feature to be able to have several Super Users is becoming more important, and many users have requested it in the forums and in #2589

Tasks:

  • Create superAdmin permission. The superAdmin permission is equivalent to the currently "superUser" in terms of power.
  • The user stored in the config file has always superAdmin permission.
  • Code: change all calls to checkUserIsSuperUser to: checkUserHasSuperAdmin permissions, setUserIsSuperUser becomes setUserHasSuperAdmin, checkUserIsSuperUserOrTheUser -> checkUserIsTheUserOrHasSuperAdmin
  • Add / update unit tests

Note:

  • the Super User stored in the config file will never lose its super admin capability. But other users with SuperAdmin permission can lose it
  • The UI for setting Super Admin permission is out of scope, it is covered in Add Support for Multiple Superusers #2589
@tsteur
Copy link
Member

tsteur commented Jan 22, 2014

In e4b425b: refs #4564 #2589 added possibility to define multiple superusers

@tsteur
Copy link
Member

tsteur commented Jan 22, 2014

In 743d7b8: refs #4564 #2589 do not allow to edit a users websites permissions if user is superuser. Reload page after successfully changing superuser permission to make sure it is afterwards possible to (edit / not edit) websites permissions

@tsteur
Copy link
Member

tsteur commented Jan 22, 2014

In 265f4b9: refs #4564 #2589 we need a small difference between superUser and configSuperUser

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 743b92d: refs #4564 some more fixes for config super user

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In bdb6967: refs #4564 restrict sites to login for all non super users

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In bda7796: refs #4564 also check for the config user

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 81e7f87: refs #4564 introducing new methods to make user a user has superuser access. Old methods will still work but are marked as deprecated and they will be removed in a future release

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In df54712: refs #4564 introducing some more new methods for has superuser access. Old methods will still work but are marked as deprecated and they will be removed in a future release

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In cae8ff4: refs #4564 added test to make sure the deprecated methods will be there as promised and removed afterwards

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In d8a69b1: refs #4564 fixed some permission issues and removed the todo tags

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In ff36d5e: refs #4564 added missing method again to not break API and fix tests

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In ea48bba: refs #4564 added db update (version number needs to be changed later probably) and renamed more methods

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 71bf5fe: refs #4564 added column superuser access

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 0ffbe10: refs #4564 fix sql

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 57a1824: refs #4564 fix adding anonymous user is not possible

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 838fea8: refs #4564 fixing tests

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 1c51265: refs #4564 deprecate some more methods

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In e3515a5: refs #4564 simplified login tests

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 5d14a67: refs #4564 added some Login tests to make sure a user with super user access will be authenticated as super user

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 8892cce: refs #4564 improved readability of the test

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 0a2e2d3: refs #4564 added some more test cases and removed some obsolete comments

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 67202fc: refs #4564 whitespace

@tsteur
Copy link
Member

tsteur commented Jan 23, 2014

In 91defb4: refs #4564 some more tests, also grepped for different superuser terms and updated some test names

@tsteur
Copy link
Member

tsteur commented Jan 24, 2014

In ee5aba1: refs #4564 fix tests

@tsteur
Copy link
Member

tsteur commented Jan 24, 2014

current status of #2589 and #4564 and #4582

It should work so far. As discussed user role is "SuperUser" not "SuperAdmin". Once a superUser role is set you "lose" all previous custom access because you gain permission to everything anyway. Updated/Added tests, renamed methods, added UI. Also tested whether scheduled tasks still work and looks good.

Needs to be done:

  • Update documentation
  • In blog post inform about deprecated methods which will be removed in the future

I have some changes in the submodules but haven't committed them to keep it simple. It should work though but haven't tested it.

@tsteur
Copy link
Member

tsteur commented Jan 27, 2014

In da54aa4: refs #4564 some bugfixes, documentation and tests

@tsteur
Copy link
Member

tsteur commented Jan 27, 2014

In e6133ac: refs #4564 skipping languagesManager test to fix build

@tsteur
Copy link
Member

tsteur commented Jan 27, 2014

In 08f33b6: refs #4564 deprecated method was used

@tsteur
Copy link
Member

tsteur commented Jan 27, 2014

In e6daa61: refs #4564 add superuser before running the ui tests

@mattab
Copy link
Member Author

mattab commented Jan 28, 2014

In 92c88a3: 2.0.4-b5 including schema change for Super Use access refs #4564

sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 added some Login tests to make sure a user with …
5d14a67 
…super user access will be authenticated as super user
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 improved readability of the test
8892cce
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 added some more test cases and removed some obso…
0a2e2d3 
…lete comments
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 whitespace
67202fc
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 some more tests, also grepped for different supe…
91defb4 
…ruser terms and updated some test names
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 fix tests
ee5aba1
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
matomo-org#4564 updated some translation strings
8f4e45e
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 some bugfixes, documentation and tests
da54aa4
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 skipping languagesManager test to fix build
e6133ac
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 deprecated method was used
08f33b6
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 add superuser before running the ui tests
e6daa61
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@mattab
2.0.4-b5 including schema change for Super Use access refs matomo-org…
92c88a3 
…#4564
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@mattab
Prevent notice on the Upgrade screen when triggering 2.0.4-b5 refs ma…
e012b22 
…tomo-org#4564
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@mattab
Capitalizing Super User for consistency refs matomo-org#4564
f81dcbc
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 faster check in case user is the current user
0dab4f5
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
Merge pull request matomo-org#212 from piwik/multi_superuser
dabec29 
refs matomo-org#4564 matomo-org#2589 support for multi superuser
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 password has to be at least 6 characters
b9e667f
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 added method to not break api
fb6775b
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 throw a updateErrorException in case of any exce…
88bca63 
…ption during the update
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 avoid possible failure during update because of …
f386511 
…missing permissions -> Get the option value of delegated management directly
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 cleanup and make sure a new user does not get su…
8d313b0 
…per user access
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 fix method names
9e20f5a
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 fixes Login\Auth not found when generating Visits
0e6ec5d
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 instead of moving the option entry -> copy it. M…
0e366ab 
…akes sure the superuser still sees the configured phone numbers after migration
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 get the superuser from database
7250284
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 fix import logs and archive.sh did no longer wor…
ac77310 
…k because there is no longer a superuser in the config. Read directly the tokenauth of any superuser from a generated file instead. The updatetoken.php will create a file containing the needed token in tmp/cache which will not be served by default (on apache). Also the script contains directly an exit to avoid execution or anything from the browser or cli
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 test whether import_logs.py script can find the …
a361138 
…token_auth automatically
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 we have to get the token from the piwik_tests da…
4bc46c3 
…tabase
sabl0r pushed a commit to sabl0r/piwik that referenced this issue Sep 23, 2014
@tsteur
refs matomo-org#4564 it does not accept a parameter
d4839f1
Closed
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@tsteur tsteur

Labels
Critical Indicates the severity of an issue is very critical and the issue has a very high priority. Enhancement For new feature suggestions that for example enhance Matomo's cabapilities..
Projects
None yet
Milestone
2.1
Development

No branches or pull requests
2 participants
@tsteur @mattab