27 Commits

Author	SHA1	Message	Date
Raphael Michel	df0b580dd6	Pluggable permissions (#5728) ... * Data model draft * Refactor query and assignment usages of old permissions * Backend UI * API serializer * Big string replace * Docs, tests and fixes for teams api * Update docs for device auth * Eliminate old names * Make tests pass * Use new permissions, remove inconsistencies * Add test for translations * Show plugin permissions * Add permission for seating plans * Fix plugin activation * Fix failing test * Refactor to permission groups * Update doc/api/resources/devices.rst Co-authored-by: luelista <weller@rami.io> * Update doc/api/resources/events.rst Co-authored-by: luelista <weller@rami.io> * Update src/pretix/api/serializers/organizer.py Co-authored-by: luelista <weller@rami.io> * Fix typo * Fix python version compat * Replacement after rebase * Add proper permission handling for exports * Docs for exporters * Runtime linting of permission names * Fix typos * Show export page even without orders permission * More legacy compat * Do not strongly validate before plugins are loaded * Rebase migration * Add permission for outgoing mails * Review notes * Update doc/api/resources/teams.rst Co-authored-by: Richard Schreiber <schreiber@pretix.eu> * Clean up logic around exporters * Review and failures * Fix migration leading to forbidden combination * Handle permissions on event copying * Remove print-statements * Make test clearer * Review feedback * Add AnyPermissionOf * migration safety --------- Co-authored-by: luelista <weller@rami.io> Co-authored-by: Richard Schreiber <schreiber@pretix.eu>	2026-03-17 14:43:56 +01:00
luelista	7e45837295	Security hardening for 2FA configuration (#5685) ... * reduce default RecentAuthenticationRequiredMixin timeout to 15 min * never cache pages with RecentAuthenticationRequiredMixin * show emergency codes only once after generating	2026-02-19 12:43:23 +01:00
Raphael Michel	8f69cb166d	[SECURITY] Fix old password not validated on password change	2025-11-26 19:39:32 +01:00
luelista	1cb2d443f9	Validation of user email addresses (#5434) ... * Validation of user email addresses * Improve email and password change forms	2025-11-07 11:17:34 +01:00
Raphael Michel	177a7d07fc	Update license header (#5540)	2025-10-10 15:32:46 +02:00
Raphael Michel	32d6ded003	Stricten password validation to match PCI DSS requirements (#4467) ... * Stricten password validation to match PCI DSS requirements * Review fix * Fix a file header	2024-09-17 13:29:17 +02:00
Raphael Michel	57738f19bf	Update webauthn requirement from ==0.4.* to ==2.0.* (#3880) ... * Get rid of unmaintained dependency python-u2flib-server * Update webauthn requirement from ==0.4.* to ==2.0.* * Fix tests * Update src/pretix/control/views/auth.py Co-authored-by: Richard Schreiber <schreiber@rami.io> * Update src/pretix/control/views/auth.py Co-authored-by: Richard Schreiber <schreiber@rami.io> * Update src/pretix/control/views/user.py Co-authored-by: Richard Schreiber <schreiber@rami.io> * Update src/pretix/control/views/user.py Co-authored-by: Richard Schreiber <schreiber@rami.io> * Update src/pretix/control/views/user.py Co-authored-by: Richard Schreiber <schreiber@rami.io> --------- Co-authored-by: Richard Schreiber <schreiber@rami.io>	2024-02-14 13:27:24 +01:00
ser8phin	169a6c51b4	Add check to force users to change password (#2284)	2021-11-11 11:10:33 +01:00
Raphael Michel	a93287207b	pretix Community Edition moves to AGPLv3-based license (#2023)	2021-04-12 10:33:47 +02:00
julia-luna	b51108ab22	Confirm disabling all notifications (#1845)	2020-11-05 18:40:53 +01:00
Raphael Michel	bd238f76ce	Fix broken test	2020-03-16 13:29:12 +01:00
Raphael Michel	8a6a515b6a	Refs #775 -- Pluggable authentication backends (#1447) ... * Drag-and-drop: Force csrf_token to be present * Rough design * Missing file * b.visble * Forms * Docs * Tests * Fix variable	2019-10-17 09:11:03 +02:00
Raphael Michel	2c4ee3b3c7	Replace U2F with WebAuthn (#1392) ... * Replace U2F with WebAuthn * Imports * Fix backwards compatibility * Add explanatory comment * Fix tests	2019-09-10 09:58:31 +02:00
Raphael Michel	d85ddb5bda	Integrate django-scopes (#1319) ... * Install django-scopes * Fix tests.api * Update tasks and cronjobs * Fix remaining tests * Remove unused import * Fix tests after rebase * Disable scopes for get_Events_with_any_permission * Disable scopes for a management command	2019-06-17 10:46:55 +02:00
Raphael Michel	9dace592c0	Refs #787 -- Activate 2FA after adding a device by default	2018-04-09 18:48:00 +02:00
Raphael Michel	128203800c	Implement notifications for admin users (#700) ... * First stab at notification settings * Add "global" setting for notification levels * Trigger notification task * Get users with permission for event * Actually send notification emails * More notifications * Allow to turn off notifications * Link in email to pause all notifications * Add NotificationType to wordlist * Add notification tests * Add documentation * Rebase fixes	2017-12-14 22:06:08 +01:00
Raphael Michel	0acee0e362	Get rid of User.givenname and User.familyname	2017-01-07 16:35:04 +01:00
Raphael Michel	44b6777291	Fix compatibility with newer pytest versions	2016-11-07 11:57:08 +01:00
Raphael Michel	888aba5714	2FA: Require recent authentication to change settings	2016-10-09 12:59:43 +02:00
Raphael Michel	2611b7619e	2FA: Added tests	2016-10-09 12:59:43 +02:00
Raphael Michel	42b9559b6f	Removed selenium as a test dependency	2016-08-14 17:20:33 +02:00
Jason Estibeiro	e685f8e819	Added basic Django password validations and updated .gitignore (#136)	2016-05-11 13:38:31 +02:00
Raphael Michel	7def097dcd	Refs #96 -- Completely removed local users	2015-09-17 00:55:00 +02:00
Raphael Michel	e828d711bd	Used isort to order all import statements	2015-07-19 20:46:34 +02:00
Raphael Michel	1f08dfda5c	Resolved flake8 warnings	2015-06-28 17:02:12 +02:00
Raphael Michel	2a8b3cbfa9	Added checks for data versioning within the existing tests	2015-06-21 22:26:50 +02:00
Raphael Michel	601ceb36ba	Tests for user settings	2015-06-05 18:34:41 +02:00