markzz/aurweb.git/web/lib/acctfuncs.inc.php, branch v3.4.2aurweb working repositoryhttps://git.markzz.net/markzz/aurweb.git/atom/web/lib/acctfuncs.inc.php?h=v3.4.22014-07-29T12:39:10ZSuppress PHP notice in process_account_form()2014-07-29T12:39:10ZLukas Fleischerarchlinux@cryptocrack.de2014-07-29T12:36:14Zurn:sha1:4b5f8da5be84b10d502866ce49e83c0aa913f1fe
Add a check to remove a notice which is displayed after registration
since commit 03c6304 (Rework permission handling, 2014-07-15).
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Do not allow regular users to edit all accounts2014-07-25T09:30:33ZLukas Fleischerarchlinux@cryptocrack.de2014-07-25T09:24:53Zurn:sha1:34aa226c6608f511694b6d5d44fbddb30e4c945a
Fixes a regression introduced in 03c6304 (Rework permission handling,
2014-07-15).
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Clean up user references in user_delete()2014-07-25T09:30:32ZLukas Fleischerarchlinux@cryptocrack.de2014-07-25T08:28:15Zurn:sha1:f4ee1278e5509c531675828dc8fce78ae1a608b9
Explicitly clean up all references before deleting a user.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Add a new user group "Trusted User & Developer"2014-07-15T20:58:57ZLukas Fleischerarchlinux@cryptocrack.de2014-07-15T20:49:18Zurn:sha1:3610f3c6a4e37f79139ffb38eebf0d00cd6add6d
This group has full permissions on everything.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Disallow privileged users to use invalid user names2014-07-15T20:56:57ZLukas Fleischerarchlinux@cryptocrack.de2014-07-15T20:17:57Zurn:sha1:1b901616dc355cbab286ece18ca2c9c9e19d3415
Prevent Trusted Users and developers from accidentally using a name that
contains invalid characters. Also, remove user_is_privileged() which is
no longer needed after this change.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Rework permission handling2014-07-15T20:56:57ZLukas Fleischerarchlinux@cryptocrack.de2014-07-15T18:52:54Zurn:sha1:03c6304e19d5d3ecd276dd3f42220db301ab511d
Add a new function has_credential() that checks whether the currently
logged in user is allowed to perform a given action. Moving all
permission handling to this central place makes adding new user groups
and adjusting permissions much more convenient.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
acctfuncs.inc.php: Fix indentation2014-06-05T13:16:34ZLukas Fleischerarchlinux@cryptocrack.de2014-06-05T13:16:13Zurn:sha1:5463bdeff65681f58605e982f9da9cf9be362929
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
acctfuncs.inc.php: Reduce nesting in several functions2014-06-05T13:12:10ZLukas Fleischerarchlinux@cryptocrack.de2014-06-05T12:56:31Zurn:sha1:1aec9f712462f89d5676de57327761941f6d0163
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Do not return "None" in user functions2014-06-05T13:12:10ZLukas Fleischerarchlinux@cryptocrack.de2014-06-05T12:47:38Zurn:sha1:0a66f48aa1293f93579b7de9bc5d080cf5f3105e
Return null instead of the string "None" in username_from_id(),
uid_from_email() and uid_from_username().
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Accept upper case letters in valid_username()2014-05-30T07:32:48ZLukas Fleischerarchlinux@cryptocrack.de2014-05-30T07:32:48Zurn:sha1:e018670607ce6491163fbefb8eb84eec8588bf7b
In commit 0722f46 (Simplify valid_user() and valid_username(),
2014-02-06), the conversion to lower case letters was unintentionally
removed and in consequence, names with upper case letters have been
rejected since then.
Instead of reintroducing the conversion, add the "i" modifier to the
regular expression validating the name to do case-insensitive pattern
matching.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>