Statistics
| Branch: | Tag: | Revision:

root / helpdesk / middleware.py @ 5039a44f

History | View | Annotate | Download (4.5 kB)

# Date Author Comment
27f0e60e 06/23/2011 10:53 am Giorgos Gousios

Forbid destructive actions from the helpdesk GUI

Mark requests with impersonated users as readonly and check access on all API method invocations
10ac885c 06/21/2011 03:59 pm Giorgos Gousios

Take care of various auth corner cases

Allow requests with X-Auth-Tmp-Token set but not under /helpdesk to
proceed
-Do not allow requests from non-valid users to proceed (in the face of
the recent Dropbox exploit :))
1b68fa48 06/21/2011 02:36 pm Giorgos Gousios

Really process URL exclusions
89f34211 06/20/2011 04:51 pm Giorgos Gousios

Better cookie expiration handling
e55b6c56 06/20/2011 04:29 pm Giorgos Gousios

Impersonation works as expected

-Remove superflous check from middleware
-Make iframe cover full screen in firefox
-Filter our helpdesk users from users list
5ac53b64 06/20/2011 03:35 pm Giorgos Gousios

Add helpdesk user group

Helpdesk users are registered statically using the HELPDESK user type.
The middleware will only allow impersonation requests from helpdesk
users.
0e3918f3 06/15/2011 05:08 pm Giorgos Gousios

Only allow specific IP addresses to connect to the helpdesk app
15e9cf1a 06/14/2011 05:19 pm Giorgos Gousios

Fix tmp auth header creation
6ff0245f 06/14/2011 01:38 pm Giorgos Gousios

Middleware for dealing with impersonation requests