Raphael Michel
3e0ff1e6ed
Send security notification when recovery code is used or created by admin ( #5719 )
...
* Send security notification when recovery code is used or created by admin
"Where to store recovery codes" is one of these problems there is no
right answer to, so many people store them in a less-than-optimal place.
If that's the reality we live in, this PR adds at least a little
security so one notices when they get used :)
* Add sentence
2026-01-26 10:01:07 +01:00
Raphael Michel
177a7d07fc
Update license header ( #5540 )
2025-10-10 15:32:46 +02:00
Raphael Michel
5d56cd3917
Fix missing atomicity for handling forms and logs (might be the reason for Z#23178997) ( #4755 )
2025-02-05 16:56:38 +01:00
Raphael Michel
03d3c389da
Fix #1674 -- Change spelling of e-mail to email ( #4636 )
...
* Fix #1674 -- Change spelling of e-mail to email
* Conflicts and word list
* Add MobilePay to wordlist
* fix usage in tests
2024-11-18 17:21:29 +01:00
Raphael Michel
4afb7a4976
Allow admins to generate emergency 2FA tokens ( #4035 )
...
* Allow admins to generate emergency 2FA tokens
* Update src/pretix/control/views/users.py
Co-authored-by: Richard Schreiber <schreiber@rami.io >
---------
Co-authored-by: Richard Schreiber <schreiber@rami.io >
2024-04-03 10:15:17 +02:00
Raphael Michel
92fbe76327
Fix anonymizing users by setting their auth_backend
2022-02-28 12:07:24 +01:00
Raphael Michel
d7acd2b6bf
Refs #2465 -- Introduce unique identifiers for authentication backends ( #2466 )
2022-02-23 10:16:35 +01:00
Raphael Michel
6b4adccee5
Bump django-hijack to 3.1.*
2021-12-20 09:51:52 +01:00
Raphael Michel
a93287207b
pretix Community Edition moves to AGPLv3-based license ( #2023 )
2021-04-12 10:33:47 +02:00
Raphael Michel
af23d6e4bf
Upgrade to Django 3.0 and other dependencies ( #1568 )
...
* Upgrade Django to 3.0 and other dependencies to recent versions
* Fix otp version contsraint
* Remove six dependency
* Resolve some warnings
* Fix failing tests
* Update django-countries
* Resolve all RemovedInDjango31Warnings in test suite
* Run isort
* Fix import
* Update PostgreSQL version on travis
2020-03-23 15:02:20 +01:00
Raphael Michel
8a6a515b6a
Refs #775 -- Pluggable authentication backends ( #1447 )
...
* Drag-and-drop: Force csrf_token to be present
* Rough design
* Missing file
* b.visble
* Forms
* Docs
* Tests
* Fix variable
2019-10-17 09:11:03 +02:00
Raphael Michel
7039374588
Allow to anonymize users
2018-11-05 11:11:43 +01:00
Raphael Michel
bd48112bf9
Refs #710 -- Remove monkeypatch for django-hijack
2018-08-08 09:24:52 +02:00
Raphael Michel
afd766999c
Upgrade to Django 2.1 ( #710 )
...
* Upgrade to Django 2.0
* more models
* i18n foo
* Update setup.py
* Fix Sentry exception PRETIXEU-JC
* Enforce slug uniqueness
* Import sorting
* Upgrade to Django 2.1
* Travis config
* Try to fix PostgreSQL failure
* Smaller test matrix
* staticfiles→static
* Include request in all authenticate() calls
2018-08-06 12:48:46 +02:00
Raphael Michel
a284e0c2f7
Add auditable superuser mode ( #824 )
...
* Remove is_superuser everywhere
* Session handling
* List of sessions, relative timeout
* Absolute timeout
* Optionally pseudo-force audit comments
* Fix failing tests
* Add tests
* Add docs
* Rebsae migration
* Typos
* Fix tests
2018-03-28 14:16:58 +02:00
Raphael Michel
dc2bcdcfbc
Log impersonation actions
2018-02-03 16:50:53 +01:00
Raphael Michel
8143999803
Small improvements to user list
2018-01-29 13:25:33 +01:00
Raphael Michel
14da25bd9e
Allow administrators to impersonate other users
2018-01-29 12:25:11 +01:00
Raphael Michel
3a713541a2
User management UI for system administrators
2018-01-29 12:25:11 +01:00
