Univention Bugzilla – Bug 51259
Separate black- and whitelists for Self Service tabs
Last modified: 2020-06-24 12:53:06 CEST
Created attachment 10352 [details] Patch for separate white/blacklists for Self Service tabs "Password change" and "Your profile" A customer would like to have separate black- and whitelists for each of the Self Service's tabs. Currently the lists are being applied globally to all tabs. The customer specifically wanted to separate both "Password change" and "Your profile" from "Password forgotten" and "Protect account". The attached patch allows for a new "tab" parameter to be passed to is_blacklisted, which is then used in the UCR var name. It only solves their specific use case and doesn't allow for more fine-grained lists per each tab.
A product integration should be generic (it should support black/whitelists for all tabs)
c3444e636b Bug #51259: yaml 6a1992d962 Bug #51259: duplicate blacklist/whitelist ucr variables content 0d69750724 Bug #51259: yaml e212fb7964 Bug #51259: debian changelog 6862a790c6 Bug #51259: add seperate blacklist/whitelist for profiledata and account deregistration Successful build Package: univention-self-service Version: 4.0.3-30A~4.4.0.202006181337 Branch: ucs_4.4-0 Scope: errata4.4-4 ----- The "Change password" page does not go over the selfservice backend but changes the password directly, so there is no blacklist/whitelist for that. There are now 3 groups of 4 ucr variables for blacklist/whitelist umc/self-service/{passwordreset,profiledata,account-deregistration}/{blacklist,whitelist}/{users,groups} passwordreset "Protect account" page get_contact set_contact "Password forgotten" page get_reset_methods send_token "Set new password" page set_password profiledata "Your profile" page get_user_attributes set_user_attributes validate_user_attributes account-deregistration "Delete my account" button on "Your profile" page deregister_account Methods that do not check for blacklist/whitelist "Your profile" page get_user_attributes_descriptions Blacklist/Whitelist for account creation/verification not needed "Create an account" page get_registration_attributes create_self_registered_account "Account verification" page send_verification_token verify_contact
e4083ea128 Bug #51259: yaml a583948942 Bug #51259: debian changelog fbacedcd39 Bug #51259: set missing UCR defaults in postinst Successful build Package: univention-self-service Version: 4.0.3-32A~4.4.0.202006231526 Branch: ucs_4.4-0 Scope: errata4.4-4
> There are now 3 groups of 4 ucr variables for blacklist/whitelist > umc/self-service/{passwordreset,profiledata,account-deregistration}/ > {blacklist,whitelist}/{users,groups} OK > > passwordreset > "Protect account" page > get_contact > set_contact > "Password forgotten" page > get_reset_methods > send_token > "Set new password" page > set_password OK > profiledata > "Your profile" page > get_user_attributes > set_user_attributes > validate_user_attributes OK > account-deregistration > "Delete my account" button on "Your profile" page > deregister_account OK YAML: OK
<http://errata.software-univention.de/ucs/4.4/632.html>