Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Web proxy, replace user-proxy-auth for group membership #3250

Closed
AdSchellevis opened this issue Feb 25, 2019 · 0 comments
Closed

Web proxy, replace user-proxy-auth for group membership #3250

AdSchellevis opened this issue Feb 25, 2019 · 0 comments
Assignees
@AdSchellevis
Labels
cleanup Low impact changes
Milestone
19.7

Comments

@AdSchellevis
Copy link
Member

As discussed with @fichtner, starting from 19.7 we're planning to remove the last hasPrivilege() call and replace it with group membership test.
@AdSchellevis AdSchellevis added the cleanup Low impact changes label Feb 25, 2019
@AdSchellevis AdSchellevis added this to the 19.7 milestone Feb 25, 2019
@AdSchellevis AdSchellevis self-assigned this Feb 25, 2019
AdSchellevis added a commit that referenced this issue May 24, 2019
@AdSchellevis
Proxy, minor regression in authentication. contraints are always chec…
54551b0 
…ked now, which should only apply for local. related to #3250
fichtner pushed a commit that referenced this issue May 24, 2019
@AdSchellevis @fichtner
Proxy, minor regression in authentication. contraints are always chec…
450ff5b 
…ked now, which should only apply for local. related to #3250

(cherry picked from commit 54551b0)
(cherry picked from commit e8dbda3)
AdSchellevis added a commit that referenced this issue Jul 2, 2019
@AdSchellevis
MVC, AuthGroupField, don't add "none" if multiple selections are allo…
3e87808 
…wed. eventually we need to restructure this a bit more (#3252), found while working on #3250
AdSchellevis added a commit that referenced this issue Jul 2, 2019
@AdSchellevis
ACL, add support for group validation by id in inGroup(), needed for #…
5b5dc71 
…3250
EugenMayer pushed a commit to KontextWork/opnsense_core that referenced this issue Jul 22, 2019
@AdSchellevis @EugenMayer
Proxy, minor regression in authentication. contraints are always chec…
a227cea 
…ked now, which should only apply for local. related to opnsense#3250
EugenMayer pushed a commit to KontextWork/opnsense_core that referenced this issue Jul 22, 2019
@AdSchellevis @EugenMayer
MVC, AuthGroupField, don't add "none" if multiple selections are allo…
43a1ea3 
…wed. eventually we need to restructure this a bit more (opnsense#3252), found while working on opnsense#3250
EugenMayer pushed a commit to KontextWork/opnsense_core that referenced this issue Jul 22, 2019
@AdSchellevis @EugenMayer
ACL, add support for group validation by id in inGroup(), needed for o…
372287e 
…pnsense#3250
EugenMayer pushed a commit to KontextWork/opnsense_core that referenced this issue Jul 22, 2019
@AdSchellevis @EugenMayer
Proxy, ditch "user-proxy-auth" usage and replace with local group res…
503efaf 
…trictions. closes opnsense#3250

constraints are easy to test with : /usr/local/sbin/opnsense-auth-test -s squid -u root
EugenMayer pushed a commit to KontextWork/opnsense_core that referenced this issue Jul 22, 2019
@AdSchellevis @EugenMayer
Proxy, minor regression in authentication. contraints are always chec…
8a0b170 
…ked now, which should only apply for local. related to opnsense#3250
EugenMayer pushed a commit to KontextWork/opnsense_core that referenced this issue Jul 22, 2019
@AdSchellevis @EugenMayer
MVC, AuthGroupField, don't add "none" if multiple selections are allo…
5b6eb66 
…wed. eventually we need to restructure this a bit more (opnsense#3252), found while working on opnsense#3250
EugenMayer pushed a commit to KontextWork/opnsense_core that referenced this issue Jul 22, 2019
@AdSchellevis @EugenMayer
ACL, add support for group validation by id in inGroup(), needed for o…
1d46ef0 
…pnsense#3250
EugenMayer pushed a commit to KontextWork/opnsense_core that referenced this issue Jul 22, 2019
@AdSchellevis @EugenMayer
Proxy, ditch "user-proxy-auth" usage and replace with local group res…
23ea1e7 
…trictions. closes opnsense#3250

constraints are easy to test with : /usr/local/sbin/opnsense-auth-test -s squid -u root
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@AdSchellevis AdSchellevis

Labels
cleanup Low impact changes
Milestone
19.7
Development

No branches or pull requests
1 participant
@AdSchellevis