AndyButland
a262f0b342
Fixed bug where member authorise attribute was not restricting for groups
2013-08-31 22:52:54 +01:00
Shannon
7806762b80
Implemented a real .Net configuration section for umbracoSettings.config + unit tests for every property. NOTE: This isn't referenced in the codebase yet, going to start setting default values for most of the properties so that we can remove them from the config file for shipping (ship minimal config) then reference these settings in the codebase.
2013-08-31 11:28:19 +10:00
Darren Ferguson
1995b25092
Adding new Memership provider implementation
...
Obsolete SecUtility class
Add Security Helper class
2013-08-28 12:48:04 +01:00
Shannon
3169b52bf4
Updates more of WebSecurity to use the new user api.
2013-08-09 13:45:57 +10:00
Shannon
c5a80ccb03
Changed WebSecurity to expose IUser instead of User, then fixed up the knock-on effect, obsoleted all calls to the legacy User object in the base classes to point to use the WebSecurity class to access the new user object.
2013-08-09 13:24:26 +10:00
Shannon
c4b44ea0e3
Fixes: U4-2577 Can't save umbraco user - without re-filling in the password
...
Fixes: U4-541 Wrong dictionary key when using in backend template names
This changes the way that the value that is stored in the auth cookie. Previously we just stored a GUID which was the user's contextid stored in the db, now we store encrypted values of a few necessary user objects. In 6.2 we'll actually set a real .Net user object on the HttpContext. For now, the http module will simply just ensure that the culture is set correctly for the currently logged in user.
2013-08-02 15:16:04 +10:00
Shannon
d8630a3ec1
Fixes cast issue
2013-07-31 18:28:18 +10:00
Shannon
dcf730a1bc
ensures the ui cultures are set in the back office. adds WebSecurity as a dependency for UmbracoContext.
2013-07-31 18:21:27 +10:00
Shannon
6f464567bb
Implements real FormsAuthentication for back office cookie authentication... finally :)
2013-07-31 17:08:56 +10:00
Shannon
ad697db42b
Fixes an issue with WebSecurity logout
2013-07-31 11:10:33 +10:00
Shannon
2f80aee165
Fixes an issue with WebSecurity logout
2013-07-31 11:09:30 +10:00
Shannon
de2660cfb2
Merge branch '4.11.7---ITask-updates' into 7.0.0
...
Conflicts:
.gitignore
.hgtags
src/Umbraco.Core/XmlExtensions.cs
src/Umbraco.Tests/Umbraco.Tests.csproj
src/Umbraco.Web.UI/Umbraco.Web.UI.csproj
src/Umbraco.Web/Umbraco.Web.csproj
src/Umbraco.Web/umbraco.presentation/umbraco/create/CreatedPackageTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/DLRScripting.ascx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/DLRScriptingTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/MediaTypeTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/MemberGroupTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/ScriptTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/XsltTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/content.ascx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/contentTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/dialogHandler_temp.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/dictionaryTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/media.ascx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/mediaTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/nodeType.ascx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/nodetypeTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/simple.ascx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/templateTasks.cs
src/Umbraco.Web/umbraco.presentation/umbraco/create/xslt.ascx.cs
src/Umbraco.Web/umbraco.presentation/umbraco/webservices/legacyAjaxCalls.asmx.cs
2013-07-12 11:30:06 +10:00
Shannon
a7b546527c
Added more methods to User Repo/Service to get an IUser by id. Upgraded to angular 1.5.5 to fix an animation bug. Got authorization working nicely now. Fixed up the animation.less files with 1.5.5's breaking animation changes. Fixed up WebSecurity class to always have an instance of HttpContextBase (still requires much more fixing though).
2013-06-17 16:03:27 +10:00
Morten Christensen
469db82f1d
Internal creation of backoffice users and unit test to verify
2013-05-27 06:50:14 -02:00
Morten Christensen
232581664b
Moving internal membership provider classes.
...
Adding missing alias to AllowedContentTypes on ContentType.
Adding Package export test.
2013-05-24 08:13:24 -02:00
Shannon Deminick
b38397868e
Fixes: #U4-2214 - encrypted cookie value issue when it is invalid
2013-05-12 21:07:16 -10:00
Shannon Deminick
6cffa67518
Fixes merge issues and WebSecurity with the correct encryption (from failed merge along time ago).
...
Fixes ContentType to ensure that ALL property type values get reset, not just ones assigned to a group.
Fixes logic in ContentTypeService to ensure that xml is re-generated when a property type alias is changed too.
2013-04-25 21:09:07 -10:00
Sebastiaan Janssen
a06951afbd
Fix MemberAuthorizeAttribute for UmbracoApiControllers
2013-04-15 12:18:40 -02:00
Shannon Deminick
fe01bd1f29
Starts securing ITasks
2013-04-06 02:03:46 +06:00
Shannon Deminick
16746c8548
Updates authorized web services/http handlers to use WebSecurity and implements the new base class
...
properties available in 6.1. Updates WebSecurity with a few more helpful methods.
2013-04-09 22:11:12 +06:00
Shannon Deminick
495b4ed9e0
Refactors the WebSecurity class to not be static and be part of the UmbracoContext. Makes a few methods internal on it so that
...
it's not relying on the legacy User class. Cleans up the new BasePage and EnsuredUmbracoPage
2013-04-04 23:30:17 +06:00
Shannon Deminick
296c24f829
Fixes: #U4-2042 - ensures users cannot continue to user the back office after they've been disabled and
...
ensures that the user context cache is cleared when users are saved which will work in LB environments.
Changes more HttpRuntime.Cache dependencies to ApplicationContext.Current.ApplicationCache.
2013-04-04 02:11:31 +06:00
Shannon Deminick
cc55107da3
Added method to WebSecurity to validate members, updated routes for umbraco api controllers
2013-02-27 00:19:48 +06:00
Shannon Deminick
1be3af1e31
Working on #U4-1358 - moving Base page classes to their correct location/assembly. Migrated all installation webforms files and associated helper files to
...
their correct locations/namespaces/assemblies and obsoleted all of the old ones and ensure the old webforms files don't exist where the obsoleted ones were.
Fixes a security issue with the installer ajax service (used to be p.aspx, now is InstallerRestService.aspx)
2013-02-03 05:06:11 +06:00