Commit Graph

10749 Commits

Author SHA1 Message Date
Bjarke Berg
745014a4c3 User manager related updates (#9935)
* Only allow not-admins to assign groups they have themselves

* Only admins is allowed to change password of other admins

* Fixed issue with deep clone of UserGroup. The Allowed sections was not cloned. This resulted in the allowed sections of the object stored in cache was updated, everytime we changed the allowed sections on an object cloned from the cache. Even if we did not save it.

* Only Admins are allowed to add sections to a user group, that they don't have access to themselves

* Align backend code with UI. User managers that is are not admin, can only assign the same groups new users, that they have themselves.

* Make existingGroupAliases and empty array when creating a new user

Co-authored-by: Mole <nikolajlauridsen@protonmail.ch>
2021-03-08 13:26:52 +01:00
Bjarke Berg
1bac97e0b0 Bugfix: Members not locked out after failed login attempts (#9921)
* https://github.com/umbraco/Umbraco-CMS/issues/9861
Added test that shows the error

* https://github.com/umbraco/Umbraco-CMS/issues/9861
Fixed test that shows the error. Caches needs to be active, otherwise it do not show the error

* https://github.com/umbraco/Umbraco-CMS/issues/9861
More fix of test that shows the error. Caches needs to be active, otherwise it do not show the error

* https://github.com/umbraco/Umbraco-CMS/issues/9861
Fix issue by raise event and thereby update caches.

Co-authored-by: Elitsa Marinovska <elm@umbraco.dk>
2021-03-03 15:00:45 +01:00
Sebastiaan Janssen
dafca1486a Merge branch 'v8/8.12' into v8/dev 2021-03-01 16:05:25 +01:00
Sebastiaan Janssen
03b6f1ba7f Merge branch 'v8/8.11' into v8/8.12 2021-03-01 16:04:49 +01:00
Sebastiaan Janssen
22dee4e8d7 Merge branch 'v8/8.10' into v8/8.11 2021-03-01 16:04:13 +01:00
Sebastiaan Janssen
aaa8b0b4b2 Merge branch 'v8/8.9' into v8/8.10 2021-03-01 16:03:42 +01:00
Sebastiaan Janssen
7bc220b4b5 Merge branch 'v8/8.8' into v8/8.9 2021-03-01 16:03:18 +01:00
Sebastiaan Janssen
d5ee6c828d Merge branch 'v8/8.7' into v8/8.8 2021-03-01 16:02:37 +01:00
Sebastiaan Janssen
d4da9bdcb5 Merge branch 'v8/8.6' into v8/8.7 2021-03-01 16:02:11 +01:00
Bjarke Berg
8004c8dfd3 Merge pull request #9441 from umbraco/v8/bugfix/explicit-scope-examine
Ensure there's explicit scopes used for all service access in the Examine indexing logic

(cherry picked from commit 3e7f912fcd)
2021-03-01 15:55:36 +01:00
Bjarke Berg
7625857a14 Merge pull request #9870 from umbraco/v8/bugfix/ensure-custom-claims
Keep custom claims that are flowed during security stamp validation
2021-03-01 11:57:53 +01:00
Bjarke Berg
3e7f912fcd Merge pull request #9441 from umbraco/v8/bugfix/explicit-scope-examine
Ensure there's explicit scopes used for all service access in the Examine indexing logic
2021-02-24 08:17:49 +01:00
Shannon
2bb8b02233 adds notes 2021-02-23 11:28:42 +11:00
Shannon
27d94f1ca6 removes testing timeout so it stays as it was 2021-02-23 11:25:27 +11:00
Shannon
e3dc017d7e Keep custom claims that are flowed from autolinking
When auto linking with callbacks such as OnExternalLogin, custom claims can be added to the user which are flowed to the auth ticket/identity.
However, when the security stamp validator executes, the identity is re-created manually without any knowledge of those custom claims so
they are lost. This ensures that those custom claims flow through to the re-generated identity during the security stamp validation phase.
2021-02-23 10:41:00 +11:00
Chad
388e0283bc Fixes #9615 - Upgrade to Htmlsanitizer v5 (#9856)
(cherry picked from commit a6e1c2e901)
2021-02-22 09:56:13 +01:00
Shannon Deminick
64117921ea Fixes: After deleting a member, a reindex is attempted, which fails (#9807)
(cherry picked from commit fa49d6ed10)
2021-02-21 12:04:42 +01:00
Chad
ad0b70fc04 Speed up boot times and Improve Json (De)Serialization performance and reduce memory usage by reusing JsonSerializerSettings (#9670)
(cherry picked from commit 75ee3b9622)
2021-02-21 11:01:35 +01:00
Sebastiaan Janssen
980acafbeb Merge branch 'v8/contrib' into v8/dev 2021-02-20 17:17:27 +01:00
Sebastiaan Janssen
81f1c2e7d6 Update to latest Examine 2021-02-18 22:08:12 +01:00
Sebastiaan Janssen
02963e7b29 Remove HtmlSanitizer (#9803) 2021-02-18 17:50:00 +01:00
Bjarke Berg
9c9734546c Merge pull request #9830 from umbraco/v8/bugfix/logging-for-9514
Fixes logging issue with Published Router and adds logging for Collision Detection
2021-02-17 08:26:33 +01:00
Shannon
16836951b4 Fixes logging for PublishedRouter 2021-02-17 12:45:59 +11:00
Bjarke Berg
4aff5d38f8 Merge pull request #9778 from umbraco/v8/bugfix/broken-user-permissions-caches
Fixes issue with broken caches used for user permissions
2021-02-16 13:41:29 +01:00
Bjarke Berg
176b10cf5d Added overloads to inject AppCaches + Fixed tests 2021-02-16 10:56:16 +01:00
Shannon
2477951493 Adds better logging for URL collision detection. 2021-02-16 17:07:12 +11:00
Marc Goodson
230bf1052c V8/feature/super doctype create menu (#9174)
* WIP - added options from superdoctypecreate package

resolve merge conflict in create html file

* fiddling with the wording but it will never be perfect

* looks like ng-if should be ng-show

* Update data-elements for uniqueness (I'm not sure what these are used for!)

* pass 'iscomposition' on the querystring when choosing the 'composition' option from the menu

Why? - in the future we could hide the 'Compositions...' button when choosing to create a composition

* Remove PostCreateCollection implementation now the Create Collection is removed in this PR from the DocType Create menu

resolve merge conflict in Remove PostCreateCollection implementation now the Create Collection is removed in this PR from the DocType Create menu

* Add translations

* Put back PostSave method. It's useful.

Co-authored-by: Kenn Jacobsen <post@kennjacobsen.dk>
Co-authored-by: Nathan Woulfe <nathan@nathanw.com.au>
2021-02-11 09:25:38 +10:00
Bjarke Berg
51986063dd Merge pull request #9780 from umbraco/v8/bugfix/fix-mini-profiler-content-apis
Fix mini profiler so that it actually profiles the Content APIs in the back office
2021-02-09 07:15:37 +01:00
Shannon
6b4f99394d Fix mini profiler so that it actually profiles the Content APIs in the back office 2021-02-09 15:30:39 +11:00
Shannon
3b3d55ca26 Fixes issue with broken caches used for user permissions
Calculating start nodes is expensive and this is supposed to be cached but the cache was not working.
2021-02-09 13:43:28 +11:00
Bjarne Fyrstenborg
3a9cc910a0 Add more constants for tree icons 2021-02-08 17:00:00 +10:00
Sebastiaan Janssen
820b04faec Merge branch 'v8/dev' into v8/contrib 2021-01-28 16:10:52 +01:00
Sebastiaan Janssen
e62cef6151 Revert "Fixes wrong dependency in nuspec file"
This reverts commit 8642b61449.
2021-01-28 12:05:19 +01:00
Sebastiaan Janssen
abb469a404 Revert "Updated NPoco from 3.9.4 -> 4.0.2 (#9061)"
This reverts commit d9c6584d90.
2021-01-28 11:47:10 +01:00
SteveVaneeckhout
a40769de41 Add ellipsis to the Sort action in Content and Media 2021-01-28 07:44:47 +10:00
Chad
0bd4dced0b Improve performance and reduce memory use and reduce array allocations by reusing char[] (#9166)
* Reduce array allocations by reusing char[]

* don't hide .Equals()

* Reduce memory use by reducing array allocations

* Revert "Reduce memory use by reducing array allocations"

This reverts commit faf6b60234167f5443435243eb52187ab07d514c.

* reuse char[] for string.split() to avoid params [] allocation
2021-01-22 12:02:25 +10:00
Shannon Deminick
335c6b17b9 Merge pull request #9669 from nzdev/v8/bugfix/nullableint-umbracohelper
Minor optimisation by passing int instead of int? to Umbraco.Content()
2021-01-21 22:07:42 +11:00
nzdev
5c5d0dad91 Pass int to Umbraco.Content instead of int? given we know _contentId has value. 2021-01-17 14:12:47 +13:00
Rasmus John Pedersen
9851c308f5 Add custom error page for BootFailedException 2021-01-15 09:25:16 +01:00
Sebastiaan Janssen
2b4be86fa6 Merge branch 'v8/dev' into v8/contrib 2021-01-12 13:07:44 +01:00
Søren Kottal
a62a96dd92 Allow use of infinite editors in list views (#9026)
Co-authored-by: Nathan Woulfe <nathan@nathanw.com.au>
2021-01-12 09:12:24 +10:00
Sebastiaan Janssen
8642b61449 Fixes wrong dependency in nuspec file
Updates NPoco to the latest v4 version
2021-01-11 13:19:18 +01:00
Sebastiaan Janssen
ca5c56dccd Merge branch 'v8/8.10' into v8/dev
# Conflicts:
#	src/Umbraco.Web.UI/config/umbracoSettings.config
2021-01-08 15:43:45 +01:00
Martin Humlund Clausen
d9c6584d90 Updated NPoco from 3.9.4 -> 4.0.2 (#9061) 2021-01-08 15:32:09 +01:00
Sebastiaan Janssen
967485f4e1 Merge branch 'v8/contrib' into v8/dev
# Conflicts:
#	src/Umbraco.Core/Runtime/SqlMainDomLock.cs
2021-01-08 15:18:03 +01:00
Shannon Deminick
74e7ddb45f Merge pull request #9482 from umbraco/v8/feature/unattended-install
Add support for unattended installs
2021-01-07 19:19:52 +11:00
Shannon
083b5d2611 Fixes issue with SqlMainDomLock during install, obsolete InstallEmptyDatabase, ensures installation can occur with/without the umbraco version 2021-01-05 16:27:42 +11:00
Poornima Nayar
e220baf00c Added ngDocs for contenttyperesource 2020-12-28 11:34:48 +00:00
Rasmus John Pedersen
d7801a86ff Allow installing when connection string is configured
Disable unattended installs by default and enable install empty
database.

Fix create user step by adding back the HasSomeNonDefaultUser check, if
the check is missing the installer will skip creating the configured user
since the second time NewInstallStep.RequiresExecution is called, Umbraco
has been installed and it would return false and the user would never be
created.
2020-12-16 11:03:23 +01:00
Sebastiaan Janssen
cb049144ee Register the TelemetryIdentifierStep 2020-12-16 09:57:43 +01:00