202 Commits

Author	SHA1	Message	Date
Yohann D'ANELLO	654c01631a	BDE members can see aliases from other people now ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 18:29:34 +02:00
Yohann D'ANELLO	62431a4910	Treasurers can manage activity entries ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-10-04 13:49:16 +02:00
Yohann D'ANELLO	7edd622755	BDE members can now use their note balance for personal transactions ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-08 18:35:36 +02:00
Yohann D'ANELLO	03411ac9bd	Don't check permissions in a script ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-08 16:59:44 +02:00
Yohann D'ANELLO	4b03a78ad6	Fix password change form from unauthenticated users ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-07 12:57:03 +02:00
Yohann D'ANELLO	ad04e45992	PC Kfet can create and update Sogé credits (but not see them) ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-06 11:43:39 +02:00
Yohann D'ANELLO	fbf64db16e	Simple test to check permissions with the new OAuth2 implementation ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:45 +02:00
Yohann D'ANELLO	a3fd8ba063	Bad paste in comment ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:45 +02:00
Yohann D'ANELLO	9b26207515	Rework templates for OAuth2 ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:43 +02:00
Yohann D'ANELLO	7ea36a5415	[oauth2] Add view to generate authorization link per application with given scopes ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:33 +02:00
Yohann D'ANELLO	898f6d52bf	Better templates for OAuth2 authentication ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:59:20 +02:00
Yohann D'ANELLO	8be16e7b58	Permissions support fully OAuth2 scopes ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:58:05 +02:00
Yohann D'ANELLO	ea092803d7	Check permissions per request instead of per user ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:58:05 +02:00
Yohann D'ANELLO	b4d87bc6b5	Fix import ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:58:04 +02:00
Yohann D'ANELLO	dd639d829e	Implement OAuth2 scopes based on permissions ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-09-02 20:58:04 +02:00
Yohann D'ANELLO	e8f4ca1e09	Fix note account ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-08-29 14:40:55 +02:00
Yohann D'ANELLO	8056dc096d	[WEI] Old members can create WEI registrations to renew their membership easily ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-08-29 14:33:17 +02:00
Yohann D'ANELLO	d5ecb72a71	Update copyright for 2021 ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-06-14 21:45:56 +02:00
Yohann D'ANELLO	ec0bcbf015	PC Kfet can see all users ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-03-21 10:28:50 +01:00
Yohann D'ANELLO	56c5fa4057	We don't need a session to have permissions ... Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>	2021-03-09 09:41:27 +01:00
Rida LALI	a704b92c3d	Prez BDE : ajout transaction random + see all buttons	2021-02-20 15:12:08 +01:00
Yohann D'ANELLO	e60994e065	API Documentation ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2020-12-23 21:06:30 +01:00
Yohann D'ANELLO	016ab5a9c9	Remove dead code, don't try to cover unnecessary things ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2020-12-23 18:45:05 +01:00
Yohann D'ANELLO	f570ff3cd5	Check that permissions are working when accessing to API pages ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2020-12-23 18:21:59 +01:00
Yohann D'ANELLO	3a20555663	Unit tests for API pages, closes #83 ... Signed-off-by: Yohann D'ANELLO <yohann.danello@gmail.com>	2020-12-23 14:54:21 +01:00
Yohann D'ANELLO	d47799e6ee	More API filters for the permission app	2020-12-22 12:42:54 +01:00
Yohann D'ANELLO	290848f904	Non-member people can update their profile everytime	2020-12-02 14:58:14 +01:00
Yohann D'ANELLO	7bd895c1df	Grant treasurers to update a note picture	2020-10-26 17:58:30 +01:00
Yohann D'ANELLO	051591cb7a	Don't see user detail in update form	2020-10-25 21:49:16 +01:00
Yohann D'ANELLO	0e7390b669	PC Kfet can see limited user information and clubs. It can create memberships but not see them	2020-10-25 21:38:04 +01:00
Yohann D'ANELLO	6e80016b38	Don't delete object when checking an add permission: this is useless since we rollback to the initial DB state	2020-10-25 21:08:36 +01:00
Yohann D'ANELLO	cb7f3c9f18	Note account can manage BDE memberships	2020-10-23 16:42:06 +02:00
Yohann D'ANELLO	f910feca9e	PC Kfet can create and renew memberships	2020-10-23 13:17:07 +02:00
Yohann D'ANELLO	91f784872c	Treasurers can update any roles, not only the BDE-related	2020-10-23 09:50:18 +02:00
Yohann D'ANELLO	2097e67321	Add permissions to PC Kfet	2020-10-20 00:19:49 +02:00
Yohann D'ANELLO	b5fa428bad	Non-Kfet members can see their old aliases only, but no one else	2020-10-07 11:22:02 +02:00
Yohann D'ANELLO	0b1bed8048	Temporary give the right to treasurers to manage membership roles, but need to find a proper solution	2020-10-07 10:43:58 +02:00
Yohann D'ANELLO	a00d95608b	Add permission to treasurers to create a club, fix the permission check to renew a membership	2020-09-23 21:36:04 +02:00
Yohann D'ANELLO	7353348d7a	Rollback transaction when checking an add permission (experimental)	2020-09-20 09:07:51 +02:00
Yohann D'ANELLO	f63e2e088e	Don't log when the permission to lock a note is checked	2020-09-20 08:56:42 +02:00
Yohann D'ANELLO	eaf6769e8b	Treasurers can make transactions with people that are no longer a member	2020-09-19 16:33:52 +02:00
Yohann D'ANELLO	180cd3e1ec	Fix registration permissions and procedure	2020-09-14 09:49:30 +02:00
ynerant	73ca65aa91	Merge branch 'atomicity' into 'beta' ... Atomicité See merge request bde/nk20!122	2020-09-14 09:38:54 +02:00
Yohann D'ANELLO	5ed0560953	Fix linting	2020-09-14 09:09:20 +02:00
Yohann D'ANELLO	872fd8f86d	Don't cache permissions in debug mode, that's very slow	2020-09-14 08:58:12 +02:00
Yohann D'ANELLO	80e3cba4c6	BDE Treasurers can see the remittance interface	2020-09-12 18:40:14 +02:00
Yohann D'ANELLO	9b090a145c	All transactions are now atomic	2020-09-11 22:52:16 +02:00
Yohann D'ANELLO	72cc1638e6	Authenticate correctly users that connect with an authorization token	2020-09-10 09:31:27 +02:00
Yohann D'ANELLO	6a0dc4cb10	Users can see every API page since querysets are filtered and modifications are protected	2020-09-09 22:27:07 +02:00
Yohann D'ANELLO	428de69d93	Fix permissions to let treasurers to make some initial registrations	2020-09-07 23:36:50 +02:00