summaryrefslogtreecommitdiffstats
path: root/app/access-control
Commit message (Collapse)AuthorAgeFilesLines
* Users: Role Table: Update sshGunnar Mills2019-12-191-1/+1
| | | | | | | | | | | https://github.com/openbmc/openbmc/commit/19e81d3f3b731681a57bb5ef9681d33cc291bde8 restricts SSH authentication to only admin role users. Updated the table. Tested: Loaded on a Witherspoon Change-Id: Ice5c93dc6dc4aa937de2c3fb9072c2f81719325c Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
* Users: Update Callback/NoAccess RoleGunnar Mills2019-12-191-8/+6
| | | | | | | | | | | | | | | https://github.com/openbmc/bmcweb/commit/e9e6d240ab85e515f8d264e39b47a75043b73374 added a new user role, NoAccess. https://github.com/openbmc/bmcweb/commit/cb3e11fadd77b04f5b26aefbde18411625e5e304 removed Callback. This "NoAccess" role can not ssh, access Redfish, the D-Bus API, or IPMI. Tested: Loaded on a witherspoon. Change-Id: I4f870fdefb5342344fd442876d671a59864bbf34 Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
* Fix LDAP request resulting in 400 responseDerick Montague2019-12-041-20/+1
| | | | | | | | | | - Remove all references to the AuthenticationType property since our request is a PATCH and we are not changing the value. Resolves: https://github.com/openbmc/phosphor-webui/issues/102 Signed-off-by: Derick Montague <derick.montague@ibm.com> Change-Id: I911ac41bf61250847e4c308f09df8fd59dd27fa7
* Sorting certificate tableZbigniew Kurzynski2019-12-041-0/+18
| | | | | | | | | | | | | | | | | | So far the certificate table was not sorted and it happen that having multiple certificates they appear on different table position after machine restart. That is because the Redfish was used to get the list of certificates and it does not guarantee any order of elements in returned collections. After merging this commit certificates will be always sorted by: type, issuer name and then by date. Tested: Manual tests were made to cofirm that certificates are properly sorted. Signed-off-by: Zbigniew Kurzynski <zbigniew.kurzynski@intel.com> Change-Id: Ie8e63d598cd04e2396ed09244a69284e49566f8d
* Add file upload componentDixsie Wolmers2019-11-271-3/+3
| | | | | | | | | | | | | | | Created reusuable file upload component to be used on updated firmware page. Component can: -Upload file -Display status icon -Clear upload field Made minor style change to file upload on certificate management. Tested in GUI. Signed-off-by: Dixsie Wolmers <dixsiew@gmail.com> Change-Id: I09bf56eee4d670681ea5e95c1807f8177c0e4c08
* Send password when saving LDAP settingsDerick Montague2019-11-141-0/+2
| | | | | | | | | - Add password to the createLdapEnableRequest Authentication object to be sent with the LDAP payload - Add a Password to scoped ldapProperties object Signed-off-by: Derick Montague <derick.montague@ibm.com> Change-Id: I63a880548bc3d9d61c4b73719457ce19222aa354
* Certificate delete API – frontendZbigniew Kurzynski2019-11-062-11/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | With introducing option to add multiple certificates there is a need to give user a possibility to remove selected certificates, for example when they expire. This commit adds implementation of DELETE function to GUI. A new icon will appear in action section on certificate table. The delete icon will be enabled only for TrustStore certificates and disabled for others which does not have support for delete option. When user clicks on the delete icon then ‘user prompt’ is displayed and after confirmation, proper redfish action is used to delete the certificate. Middlewere implementation is here: https://gerrit.openbmc-project.xyz/c/openbmc/bmcweb/+/25281 Backend implementation is here: https://gerrit.openbmc-project.xyz/c/openbmc/phosphor-certificate-manager/+/25268 Tested on Chrome and Mozilla. New icon appears in action section. The delete option is available only for TrustStore certificates. User is able to delete selected certificate. Depends-On: I9781c5c79288ec5d080e80e42c63a55e471ddb77 Signed-off-by: Zbigniew Kurzynski <zbigniew.kurzynski@intel.com> Change-Id: I68c5f54767d6982ae3cb00830b3a1b4f5e237bea
* Rename "User" role "ReadOnly"Gunnar Mills2019-10-211-3/+3
| | | | | | | | | | | https://gerrit.openbmc-project.xyz/c/openbmc/bmcweb/+/26156 is renaming the User role ReadOnly. Update the Roles table. 26156 needs to merge first. Tested: Loaded on a Witherspoon. Change-Id: I948a6287d2c447072d5c34595589387e127d59ac Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
* Update certificate management page consistencyDixsie Wolmers2019-10-216-347/+594
| | | | | | | | | | | | | | | | | | This change applies global styles to improve page layout consistency and modal management - Adds page and section styles - Removes unused styles - Creates individual html files for modals - Updates certificate modals to bootstrap modal - Updates global styles for input file field in file-upload.scss TODO: - Update certificate table with table component in separate commit - Update CSR modal to use global form-field styles in separate commit Signed-off-by: Dixsie Wolmers <dixsiew@gmail.com> Change-Id: I9b800cb684740da1a9168294433e726efb0f9d0e
* Fix LDAP service update errorDerick Montague2019-10-093-204/+366
| | | | | | | | | | | | | | | | | | | | | | | | When a service is enabled, it must be disabled prior to changing the service type, e.g change from OpenLDAP to ActiveDirectory. - Add check to determine if a service is already enabled - Make two calls if service is already enabled. First to disable existing service. Second to enable updated service - Remove toast message for ssl check and replace with error message which also keeps submit button disabled if the regex pattern is not met Tested: - Edge - Safari - Firefox - Chrome - IE 11 Signed-off-by: Derick Montague <derick.montague@ibm.com> Change-Id: I195eeb7d1cd3621681c18f4dd9aa4414eb079c09
* Enabling multiple TrustStore Certificates uploading.Zbigniew Kurzynski2019-10-071-3/+3
| | | | | | | | | | | | | | | The TrustStore should be used to hold TLS certificates, but current TrustStore implementation does not support multiple certificates. This GUI change should allow users to add more than one certificate to TrustStore managed by OpenBMC. Tested: GUI tests were done on Chromium v74.0.3729 browser. It is possible to add multiple TrustStore Certificate and only single LDAP and HTTPs certificates. Signed-off-by: Zbigniew Kurzynski <zbigniew.kurzynski@intel.com> Change-Id: Ia7c8400d039e980ad3d1c2cfd25aa7e29699d683 Depends-On: Icd33723c1fc2580679aaaf54b3e99dfb09342402
* Clean up iconsYoshie Muranaka2019-10-022-1/+2
| | | | | | | | | | | | | | | Clean up duplicate svg icons from assets directory. Created a statusIcon component to dynamically render status icons instead of using background-image in scss files. - Moved/removed on, off, critical, warning svg icons from assets directory - Updated background-image status icons to use <icon> or <status-icon> directive Signed-off-by: Yoshie Muranaka <yoshiemuranaka@gmail.com> Change-Id: Ic0f06d78b0861d6f60d40b2dcc0b80fd6dad2a88
* Update Callback role privilegesGunnar Mills2019-09-301-4/+6
| | | | | | | | | | | | | | | | | | The "Callback" role currently is an IPMI access point, can ssh to the BMC, and is a Readonly user in Redfish and the WebUI. Added a TODO to revisit this. See: https://github.com/openbmc/bmcweb/commit/88e097c4cfa1172504d802e9f6b327f095f2748e Tested: Loaded on a Witherspoon. Now see checkmarks for Callback in the following rows: Log in to the service and read resources, IPMI access point, Redfish access point, SSH access point, and WebUI access point. Change-Id: Ica4863b1a424d0b115fb48b988c712fe27c99d74 Signed-off-by: Gunnar Mills <gmills@us.ibm.com>
* Improve LDAP accessibilityDixsie Wolmers2019-09-262-11/+17
| | | | | | | | | | | | | | -Fixes accessibility issues for table sort buttons, fieldset legend, checkboxes and radio buttons -Fixes tabbing to checkboxes -Stops tabbing to disabled sort buttons by adding ng-disabled -Removes aria-hidden from modals Tested: Verified no violations using DAP tool. Signed-off-by: Dixsie Wolmers <dixsiew@gmail.com> Signed-off-by: Derick Montague <derick.montague@ibm.com> Change-Id: I9ad240d5ed151a362c0000fdab3ebf1f2997b226
* Update users navigation sectionmiramurali232019-09-2617-0/+2449
- Changed the section name to be access-control - Moved LDAP Settings and Certificate Management to access-control navigation - Changed Manage User Account subsection name to Local User Management Resolves: openbmc/phosphor-webui#619 Signed-off-by: Mira Murali <miramurali23@gmail.com> Signed-off-by: Derick Montague <derick.montague@ibm.com> Change-Id: I0d94c80c295b997d94c04330fd87f4fc4d229bf8
OpenPOWER on IntegriCloud