summaryrefslogtreecommitdiffstats
path: root/etc/inc/priv.inc
Commit message (Collapse)AuthorAgeFilesLines
* Moves the protocol and certificate options out of the general config pageMatthew Grooms2008-09-091-16/+0
| | | | | | | | | | | | | to the Advanced admin access tab. The thought is that they should be next to each other. The certificate management has also been modified to use the centralized certificate manager. I took the liberty of removing the default certificate/key definitions from the web server configuration function as it is now trivial to create these locally. The global SSH authorized keys have also been removed. Any existing key data will be migrated to the admin account. I also added some new checks to ensure the sshd process is only restarted when its configuration has actually changed.
* Remove the page locking privileges after discussion with Scott on IRC. TheMatthew Grooms2008-09-031-12/+0
| | | | | | | feature was confusing and offered little utility that I could see. If we really need to provide serialized access to sections of the webui, IMO it should be a global lock option and enabled or disabled manually and not a privilege that is on all the time.
* Correct a regression in the privilege system where pages were not beingMatthew Grooms2008-09-031-6/+9
| | | | matched correctly. Reported by Seth.
* Cleanup authentication code. The basic auth method, the passwd, htpasswdMatthew Grooms2008-08-031-3/+3
| | | | | | | | | | | | | and pam backing functions have been removed. The basic auth method was legacy code and the backing functions were redundant with no added value that I could see. A simplified replacement backing function named local_backed has been added that authenticates to the local configuration info which should be identical to system pwdb credentials. Since the htpassword file is no longer required, sync_webgui_passwords and its wrapper function system_password_configure have been removed. The local account management functions were renamed for consistency. A few minor bugs related to setting local passwords have also been corrected.
* Rewrite the pfsense privilege system with the following goals in mind ...Matthew Grooms2008-08-011-0/+307
1) Redefine page privileges to not use static urls 2) Accurate generation of privilege definitions from source 3) Merging the user and group privileges into a single set 4) Allow any privilege to be added to users or groups w/ inheritance 5) Cleaning up the related WebUI pages
OpenPOWER on IntegriCloud