Ingo Schommer 091c096dbf FIX Disallow permissions assign for APPLY_ROLES (SS-2013-005) ...

See http://www.silverstripe.org/ss-2013-005-privilege-escalation-through-apply-roles-assignment/

2013-09-12 15:42:36 +02:00

..

Authenticator.php

Add codesniffer that ensures indentation is with tabs.

2012-12-12 17:33:31 +13:00

BasicAuth.php

API Marked statics private, use Config API instead (#8317)

2013-03-24 17:20:53 +01:00

ChangePasswordForm.php

BUG If BackURL set, validation errors send the user to wrong place.

2013-06-08 11:34:58 +12:00

Group.php

FIX Privilege escalation through Group hierarchy setting (SS-2013-003)

2013-09-12 15:42:35 +02:00

GroupCsvBulkLoader.php

Method visibility according to coding conventions

2012-09-20 10:46:59 +02:00

LoginAttempt.php

API Marked statics private, use Config API instead (#8317)

2013-03-24 17:20:53 +01:00

LoginForm.php

FIX Remove instances of lines longer than 120c

2012-09-30 17:18:13 +13:00

Member.php

FIX Correct Zend_Locale fallbacks in i18n/DateField/DateTimeField

2013-08-30 10:18:00 +02:00

MemberAuthenticator.php

API Marked statics private, use Config API instead (#8317)

2013-03-24 17:20:53 +01:00

MemberCsvBulkLoader.php

Method visibility according to coding conventions

2012-09-20 10:46:59 +02:00

MemberLoginForm.php

API Restrict MemberLoginForm to POST requests for increased security

2013-05-08 10:25:28 +02:00

MemberPassword.php

API Marked statics private, use Config API instead (#8317)

2013-03-24 17:20:53 +01:00

PasswordEncryptor.php

API Marked statics private, use Config API instead (#8317)

2013-03-24 17:20:53 +01:00

PasswordValidator.php

Allow PasswordValidator to be translated

2013-06-08 10:48:27 +12:00

Permission.php

FIX Privilege escalation through Group hierarchy setting (SS-2013-003)

2013-09-12 15:42:35 +02:00

PermissionCheckboxSetField.php

FIX Disallow permissions assign for APPLY_ROLES (SS-2013-005)

2013-09-12 15:42:36 +02:00

PermissionFailureException.php

API CHANGE: Add a PermissionFailureException that can be thrown to trigger a log-in.

2013-01-29 18:10:42 +01:00

PermissionProvider.php

FIX Remove instances of lines longer than 120c

2012-09-30 17:18:13 +13:00

PermissionRole.php

FIX Privilege escalation through APPLY_ROLES assignment (SS-2013-005)

2013-09-12 15:42:36 +02:00

PermissionRoleCode.php

FIX Privilege escalation through APPLY_ROLES assignment (SS-2013-005)

2013-09-12 15:42:36 +02:00

RandomGenerator.php

API Hash autologin tokens before storing in the database.

2012-11-09 11:29:42 +01:00

Security.php

BUG adding a more descriptive message when the CMS session times out. It used to say "Forbidden", now it says "Not logged in".

2013-08-06 17:27:37 +12:00

SecurityToken.php

API Hash autologin tokens before storing in the database.

2012-11-09 11:29:42 +01:00